[vpn] Cisco VPN Client

[Chris_Barker at WestLB-Systems.co.jp]

The biggest difference between the two is that the 3.x client recieves its
policy from the gateway while the 1.x client has to be manually configured. This
is very nice if you have a comunity of users who like to "fix things" on their
own.  With the 3.x client, there is almost nothing for them to "fix".  Another
thing is that the 3.x supports Win2K client installation while the 1.x does not.

One thing is that if you are doing RSA auth you must take care when doing the
client cert requests that the department is "default" or you will not be able to
negotiate a tunnel with the PIX. Also AFAIK you need PIX 6.0(1) to support the
3.x client

Chris Barker



|---------->
|          |
|---------->
  >-------------------------------------------------------------------->
  |                                                                    |
  |                                                                    |
  |Chuck Renner <crenner at dynalivery.com>                               |
  |                                                                    |
  |                                                                    |
  |                                                                    |
  |                                                                    |
  |11/03/2001 06:19 AM                                                 |
  |                                                                    |
  |                                                                    |
  |                                                                    |
  |                                                                    |
  |                                                                    |
  >-------------------------------------------------------------------->
  >---------------------------------|
  |                                 |
  |                                 |
  |                                 |
  |                                 |
  |                                 |
  |                                 |
  |                                 |
  |                                 |
  >---------------------------------|


 To:   "'vpn at securityfocus.com'" <vpn at securityfocus.com>
 cc:   (bcc: Chris Barker/TKY/WestLB-Systems/WLB)
 Subject:                  [vpn] Cisco VPN Client



Can anyone give me a brief rundown of the differences between the Cisco VPN
Client (currently v3.x) and the Cisco Secure VPN Client (currently v1.x)?
The VPN Client has much more recent release dates than the Secure VPN
Client, so is intended as a replacement?

This is for use with a PIX firewall.

VPN is sponsored by SecurityFocus.com








Diese Nachricht ist vertraulich. Sie ist ausschliesslich fuer
den im Adressfeld ausgewiesenen Adressaten bestimmt.
Sollten Sie nicht der vorgesehene Empfaenger sein, so bitten
wir um eine kurze Nachricht. Jede unbefugte Weiterleitung
oder Fertigung einer Kopie ist unzulaessig. Da wir nicht die
Echtheit oder Vollstaendigkeit der in dieser Nachricht
enthaltenen Informationen garantieren koennen, schliessen wir
die rechtliche Verbindlichkeit der vorstehenden Erklaerungen
und Aeusserungen aus. Wir verweisen in diesem Zusammenhang
auch auf die  fuer die Bank geltenden Regelungen ueber die
Verbindlichkeit von Willenserklaerungen mit verpflichtendem
Inhalt, die in den bankueblichen Unterschriftenverzeichnissen
bekannt gemacht werden.

This message is confidential and may be privileged. It is
intended solely for the named  addressee. If you are not the
intended recipient please inform us. Any unauthorised
dissemination, distribution or copying hereof is prohibited.
As we cannot guarantee the  genuineness or completeness of
the information contained in this message, the statements
set forth above are not legally binding. In connection
therewith, we also refer to the governing regulations of
WestLB concerning signatory authority published in the
standard bank signature lists with regard to the legally
binding effect of statements made with the intent to
obligate WestLB.



VPN is sponsored by SecurityFocus.com