Database Users

VPN Authentication Question

Does anyone know:
Is it possible to do Group Authentication with the built-in VPN client? My work network uses a Cisco VPN and I've managed to extract out of our IT department the Group name and Password but I can't figure out how to enter this onto the Exec - it offers me "A certificate on this device" or "A pre-shared key" and entering the password into the pre-shared key doesn't seem to work. Our IT department tells me that the Exec is unsupported and won't give me any help so anyone out there know how to do this?
If it's not possible, anyone recommend a good VPN client for connecting to a Cisco VPN?
Thanks
G

Anybody?
My work uses group authentication also. Does anyone know a good vpn client that will work with group authentication?

There is a Cisco ICA/Xen/client for ARM PDA here: http://www.citrix.com/English/ss/downloads/details.asp?downloadId=3607&productId=186#top
Is this what you are looking for?

interesting..
I didn't know there was a citrix client for WM. My work also uses citrix. The only problem is in order to connect with the citrix client I must have a VPN tunnel first . My work uses Cisco VPN Group Authentication. I have not yet found a VPN client for WM that will allow Cisco group authentication. If anyone knows of one, PLEASE let me know.
Thanks wovens for the citrix client. That will be neat to try if I can ever get a VPN tunnel setup.

FOUND IT!
I finally found a VPN client that will work with Cisco group authentication. It is Bluefire Mobile Security VPN. One thing I found is that after you connect you must press the END key to get out of the client because pressing the x will kill the client. Works Great!
The only problem is the company went out of business (http://www.bluefiresecurity.com). I was able to find the .cab, but not sure if it is against forum rules to post it... Can a mod please inform me, thx.

Does your company use Cisco SSL Vpn by chance? It's the way Cisco is leaning as is with less support for the ipsec since they can make more money off of licensing.
Anyhow if your company does use SSL VPN, Cisco's anyconnect client supports Windows mobile. I have been using it and it works good for what I use it for (primarily SSH, but for kicks I tried remote desktop and it worked good too).

McGeezy said:
I finally found a VPN client that will work with Cisco group authentication. It is Bluefire Mobile Security VPN. One thing I found is that after you connect you must press the END key to get out of the client because pressing the x will kill the client. Works Great!
The only problem is the company went out of business (http://www.bluefiresecurity.com). I was able to find the .cab, but not sure if it is against forum rules to post it... Can a mod please inform me, thx.
Click to expand...
Click to collapse
this website of "bluefiresecurity.com can not the opened. would u pls post it here with the cab file? thanks a lot.

BlueFire VPN Client
http://rapidshare.com/files/8640811....5.706.XScale.WM5.WM6.Regged.DIRFIX-DVTPDA.ra
There are a lot of files, rar files within zip files, but the cab for the vpn client is there, name: MobileVPN.27.5.706.ARM.PPC.Client.cab

vpn client for wizard?

I recently purchased a tmobile mda and was trying to access my campus's network. But when I logged on, the only page I could view was about downloading a vpn client for multiple os's (but no windows mobile) to use the network.
Is there a vpn client for windows mobile?
Any help would be great.
Thanks!

There's a built-in client that will handle L2TP and PPTP VPNs. If you go into Settings/Connections and click "Edit my VPN servers" you can configure the client for your VPN. It's worth a try.

Tried that, didn't work... I decided to ask my University about their network, they said it was a cisco 3000 or something... And also informed me that "to their knowledge" the windows mobile 5 built in client isn't compatible...
I then went to the College of computer science help desk to see if some peers could help me. They said someone had bought a $100 program to be able to connect to the concentrator but didn't know who made it or where to get it.
Does anyone know of such a thing? Or a cheaper alternative?

AnthaVPN
I have found AnthaVPN wich is about from 40$ to 100$ depending what you need.
I'm trying also to open VPN without this IMHO too expensive solution. But if it's the only way - then I need to buy....
Maybe some kind of tunneling from own Linux-server (With Swan) might be the free solution....

I have been testing Bluefire Security's VPN and it works great, but my employer is using a Nortel system sio I cannot comment on the Cisco compatibility. It costs $79. I have also tries Antha but is cause problems enabling Wifi and Gprs.
John

Long time I could’t make connection with the built-in VPN client. After the latest ROM update from Qtek it works (I tested only PPTP). I can make VPN to SBS server and Windows XP. Also I can use Terminal Services true VPN connection.
The only thing I can’t get working is to access network shares (I tried GSFinder+ and NetUse).
Guka

IPSEC VPN on the HD

Sorry to be a pain with a new thread, but I need to connect to a standard IPSEC (cisco) VPN gateway. IPSEC is built in on the iphone2.0 but apparently not on winmo so what's the cheapest (free?) client to use that will work with the HD?
Thanks

Nothing good for free so far...
See http://forum.xda-developers.com/showthread.php?t=395622
You can go green or blue, but neither of these is free:
http://www.theGREENbow.com/mobile.html
http://www.BLUEfiresecurity.com/products/vpn/
Have fun

I connect to my workplace using IPSec/L2TP built into Win 6.1 on my Diamond, IPSec is what the connection is at work and I connect without any problems..

Trixster,
What firewall do you use with this? I'm using a CISCO ASA (previously PIX) and can't seem to get it working. In the ASA logs it looks like it's not selecting the right tunnel.
Are you using a cert or a preshared key?
Thanks

Pre-shared Key and the unit is SnapGear 560, I haven't setup the HD yet to connect as I'm still playing with it but I don't see why it should differ from the Diamond?

Native IPSec stack on WM6.1 doesn't seem to be compatible with Cisco IPSec.

stepw said:
Native IPSec stack on WM6.1 doesn't seem to be compatible with Cisco IPSec.
Click to expand...
Click to collapse
I'm beginning to think this, but I also have a feeling it might be to do with NAT-T.
I'm going to carry on trying today, failing that I will be going to bluefire (or anything else you can recommend? I'm after a lightweight VPN client just for the odd session, it doesn't need to be smart)

Windows Mobile IPSec VPN?

My phone is really like a small computer (HTC Advantage x7510) and I would really like to be able to connect it to my company's corporate VPN. A typical windows/mac/linux client connects with Cisco's AnyConnect software, and while Cisco released a version of AnyConnect with the iPhone, they didn't for Windows Mobile 6.1. The problem as I understand it is that Windows Mobile natively supports PPTP and L2TP/IPSec connections while the Cisco implementation wants pure IPSec. The authentication scheme that we use is certificate based and then user/pass based. I created a user certificate on my desktop and then exported it to a .pfx (PKCS #12 Container) file and then imported it on my mobile device.
I have tried The Green Bow, but I have been unable to get this to work... The app seems rather buggy and I can't even save off the log properly to find out why it isn't working.
http://www.thegreenbow.com/mobile.html
Bluefire seemed like it would do the trick, but after I tell it what Certificate to use and click Finish, it tosses out an error: "An internal error has occurred while processing your request. Please contact the system administrator". It appears that Bluefire Security has disappeared, at least from the web.
Anatha VPN seemed like it would be an option, however the UI seems buggy because I can't get the dropdowns to work in the configuration (using any DPI setting in realvga). Either the Gateway dropdown or the Gateway Type dropdown do not work... it varies.
http://www.anthasoft.com/anthavpn-virtual-private-network.php
Does anyone have a solution? Free or commercial... doesn't matter.

Latest version of NCP VPN works very very well for Cisco IPSec, you can download a trial version which is valid for a few days. not buggy, but commercial....
http://www.ncp-e.com/en.html

padanfain said:
My phone is really like a small computer (HTC Advantage x7510) and I would really like to be able to connect it to my company's corporate VPN. A typical windows/mac/linux client connects with Cisco's AnyConnect software, and while Cisco released a version of AnyConnect with the iPhone, they didn't for Windows Mobile 6.1. The problem as I understand it is that Windows Mobile natively supports PPTP and L2TP/IPSec connections while the Cisco implementation wants pure IPSec. The authentication scheme that we use is certificate based and then user/pass based. I created a user certificate on my desktop and then exported it to a .pfx (PKCS #12 Container) file and then imported it on my mobile device.
I have tried The Green Bow, but I have been unable to get this to work... The app seems rather buggy and I can't even save off the log properly to find out why it isn't working.
http://www.thegreenbow.com/mobile.html
Bluefire seemed like it would do the trick, but after I tell it what Certificate to use and click Finish, it tosses out an error: "An internal error has occurred while processing your request. Please contact the system administrator". It appears that Bluefire Security has disappeared, at least from the web.
Anatha VPN seemed like it would be an option, however the UI seems buggy because I can't get the dropdowns to work in the configuration (using any DPI setting in realvga). Either the Gateway dropdown or the Gateway Type dropdown do not work... it varies.
http://www.anthasoft.com/anthavpn-virtual-private-network.php
Does anyone have a solution? Free or commercial... doesn't matter.
Click to expand...
Click to collapse
I am not sure who told you there wasn't a Windows Mobile version of the Cisco AnyConnect VPN Client because there is. There are Windows versions, Intel & PowerPC Mac OS X versions, Linux versions and Windows Mobile 5/6 versions available. I can't however see an iPhone version.
The current version for all platforms is 2.3.0254. The release notes are here:
http://www.cisco.com/en/US/docs/sec...nyconnect23/release/notes/anyconnect23rn.html
Andy

AnyConnect VPN Client is available for WM Pro, but it does not support IPSec...

The Anyconnect from Cisco doesnt work with the concentrators.

tenser234 said:
The Anyconnect from Cisco doesnt work with the concentrators.
Click to expand...
Click to collapse
No it doesn't. The 3000 series concentrators have been EOL for a while. The AnyConnect client is for use with IOS Routers and ASA Firewalls (plus the PIX but this is EOL as well). You can use the native L2TP/IPSec client in WM5/6 with the 3000 Concentrator though (as you can with IOS & the ASA).
Andy

We have a trial mobile agent setup and I have anyconnect installed and configured on my phone. I am able to establish a VPN over HSPDA and I can hit internal web pages via IE, but I am unable to RDP or SSH anywhere. Is anyone using anyconnect and able to do these things?

padanfain said:
We have a trial mobile agent setup and I have anyconnect installed and configured on my phone. I am able to establish a VPN over HSPDA and I can hit internal web pages via IE, but I am unable to RDP or SSH anywhere. Is anyone using anyconnect and able to do these things?
Click to expand...
Click to collapse
I know this is really old, but I was looking for some ipsec stuff for home. However I do use AnyConnect for SSL work vpn and I can RDP and SSH just fine.

The AnyConnect SSL Mobile client works great with the ASA 5500's. Does anyone know what it takes to fool the router into thinking a mobile device is not VPN'ing in? You need a Windows Mobile AnyConnect license installed to make the Windows Mobile client connect. We do not own any at the moment and I'm eager to see it work.

Ok I've got my ASA 5510 working perfectly using Windows Mobile and Bluefire IPSec vpn. We normally run SSL Vpn but keep Ipsec open for site to site VPN as well as mobile VPN. I got a quote on Cisco SSL AnyConnect mobile licenses on the firewall and they are $100 a pop. But if you're looking for a great IpSec client that works go with Bluefire...

Cisco VPN on HD2

Hello everybody, first of all sorry for my bad english!
I am thinking to buy an hd2, but i have a question.
At my work place, there is a WiFi network protected by Cisco VPN with a certificate and user-password autentication.
I would to connect with my hd2 with this network.
In Cisco VPN integrated in WM6.5 or i have to install a dedicated software? in this case, the software is free or i have tu buy it?
Another question: is WM6.5 multilanguage (localized in italian in particular) or only in english? If it is only in english is not a big problem, but, well if WM is localized in italian is better for me.
Thanks for reads and answers.
gmrfcb

I don't think there is a built-in support for Cisco VPN client in WM. There isn't one even in "classic" windows. Only operating system that has built-in support for Cisco VPN client is MacOS X from version 10.6

I really spent more than 10 nights on that desperately trying to figure out how to make it work with SecurID RSA and Cisco VPN groupname authentication... Still nothing helped.

Why on earth did you lose that much time? When there is no built-in support in "regular" Windows for that, why would it be in WM?

Highl1 said:
Why on earth did you lose that much time? When there is no built-in support in "regular" Windows for that, why would it be in WM?
Click to expand...
Click to collapse
Ever heard of 3rd party softwares ?

gmrfcb said:
Hello everybody, first of all sorry for my bad english!
I am thinking to buy an hd2, but i have a question.
At my work place, there is a WiFi network protected by Cisco VPN with a certificate and user-password autentication.
I would to connect with my hd2 with this network.
In Cisco VPN integrated in WM6.5 or i have to install a dedicated software? in this case, the software is free or i have tu buy it?
Another question: is WM6.5 multilanguage (localized in italian in particular) or only in english? If it is only in english is not a big problem, but, well if WM is localized in italian is better for me.
Thanks for reads and answers.
gmrfcb
Click to expand...
Click to collapse
If you are talking about Wifi by Cisco AP, it has nothing to do with VPN. The way enterprise authenticate user by Cisco AP is normally thru EAP-Fast which doesn't support by WM by default. If that's the case, install Juniper Odyssey for WM (not free but you can try it for 30 days) should solve your problem.

Xeon said:
Ever heard of 3rd party softwares ?
Click to expand...
Click to collapse
mate, there is no 64bit version of Cisco VPN Client for Vista and Windows 7, and you expect it to be for WM?

Highl1 said:
mate, there is no 64bit version of Cisco VPN Client for Vista and Windows 7, and you expect it to be for WM?
Click to expand...
Click to collapse
AnthaVPN...
But it doesn't work for me as we use groupname authentication at work and this is not supported with AnthaVPN...

I know, Verizon VZAM also supports it, but some parts

AnthaVPN or bluefire
I can connect to my office VPN (Cisco contentrator) with Bluefire VPN.
Some time ago I tried also AnthaVPN with success.
I had to make some (many..) experiments before the success.

patomas said:
I can connect to my office VPN (Cisco contentrator) with Bluefire VPN.
Some time ago I tried also AnthaVPN with success.
I had to make some (many..) experiments before the success.
Click to expand...
Click to collapse
Does you Cisco vpn concentrator uses groupname auth. ?

patomas said:
I can connect to my office VPN (Cisco contentrator) with Bluefire VPN.
.
Click to expand...
Click to collapse
same here, works great. is the only one that works

Xeon said:
Does you Cisco vpn concentrator uses groupname auth. ?
Click to expand...
Click to collapse
for groupname auth you need to have root CA certificate installed on your computer/device
if the CA is Microsoft Active Directory Certificate Services, then try to export the root CA from the web interface (it's usually http://computername/certsrv), and to install it on WM

Cisco Anyconnect
Cisco Anyconnect works with Windows Mobile / Vista (x64) / Windows 7 (x64). However requires additional licenses for ASA / Cisco Firewall.
MB

WinCE client for AnyConnect works with WM? Didn't know that
Btw you don't need additional license for ASA afaik, you just need ASD 6.x and ASA 8.x