<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi Jim (and other list members),<div><br></div><div>Cisco announced EOL on the Cisco VPN Client here:</div><div><br></div><div><a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5743/ps5699/ps2308/end_of_life_c51-680819.html" target="_blank">http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5743/ps5699/ps2308/end_of_life_c51-680819.html</a></div><div><br></div><div>I have used it before on Windows 8 x64 as well - up until a few weeks ago it was working fine. Then something changes and it stopped working. I'm not the first to run into this but instead of getting frustrated by it I went looking for alternatives. One of the threads I came across recommended Shrew Soft VPN Client.</div><div><br></div><div>For the RSA token support I'm assuming that is part of the protocol? I'm not 100% sure how it works in terms of editions as there isn't an easily locatable edition comparison table. That being said I am running in trial mode which should have been equivalent to the professional edition.</div><div><br></div><div>The guidance on the site was to report issues to this mailing list so that is partly what I'm doing here in hopes that the development team will comment on whether or not this is a supported scenario and as such a potential bug.</div><div><br></div><div>Cheers,</div><div>Colin<br><br><div><hr id="stopSpelling">From: vpn@technicolor.com<br>To: colin@bowern.com<br>CC: vpn-help@lists.shrew.net<br>Subject: RE: [vpn-help] VPN client causing "next token code" mode on RSA appliance<br>Date: Mon, 29 Jul 2013 18:40:43 +0000<br><br><style><!--
.ExternalClass p.ecxMsoNormal, .ExternalClass li.ecxMsoNormal, .ExternalClass div.ecxMsoNormal {
font-size:12.0pt;
font-family:"Times New Roman","serif";
}
.ExternalClass a:link, .ExternalClass span.ecxMsoHyperlink {
color:#0563C1;
text-decoration:underline;
}
.ExternalClass span.ecxMsoHyperlinkFollowed {
color:#954F72;
text-decoration:underline;
}
.ExternalClass p {
font-size:12.0pt;
font-family:"Times New Roman","serif";
}
.ExternalClass span.ecxEmailStyle18 {
font-family:"Calibri","sans-serif";
color:#1F497D;
}
.ExternalClass .ecxMsoChpDefault {
font-size:10.0pt;
}
.ExternalClass div.ecxWordSection1 {
}
--></style><div class="ecxWordSection1"><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;">Colin,</span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;"> </span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;">Are you saying that Cisco Client 5.0.07.0440 is no longer supported by Cisco, or/on Windows 8? I’ve used it successfully on Windows 8 x64 which is why I ask (although I still prefer Shrew). Has Cisco abandoned this client in favor of their AnyConnect?</span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;"> </span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;">Secondly, is the professional edition of Shrew required for the RSA token support (assuming the Shrew client supports it) ? I don’t see where that is called out in the professional edition vs. the standard one.</span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;"> </span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;">I haven’t had to deal with tokens for my VPN needs, so can’t give you any useful info.</span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;"> </span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;">-Jim</span></p><p class="ecxMsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;"> </span></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in;"><p class="ecxMsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";"> vpn-help-bounces@lists.shrew.net [mailto:vpn-help-bounces@lists.shrew.net] <b>On Behalf Of </b>Colin Bowern<br><b>Sent:</b> Friday, July 26, 2013 7:06 PM<br><b>To:</b> vpn-help@lists.shrew.net<br><b>Subject:</b> [vpn-help] VPN client causing "next token code" mode on RSA appliance</span></p></div></div><p class="ecxMsoNormal"> </p><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">The company I am connecting to is using the Cisco VPN Client 5.0.07.0440 which is no longer supported and recently stopped working on my Windows 8 installation. I am working on the trial of Shrew Soft VPN Client 2.2.2 to find a workaround to get IPSec VPN on Windows 8.</span></p><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";"> </span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">Since using the Shrew Soft client I have experienced several times where I am unable to connect with the client returning a user authorization failed message. Working with the VPN admins we have determined that the client is triggering my user profile to go into "Next Token Code" mode with the RSA appliance. The workaround is to use the Cisco client to connect and satisfy the next token code request, then disconnect and connect once the token code cycles. It seems that the Shrew Soft client does not recognize the next token code request.</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";"> </span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">Here are the details of the VPN:</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">Cisco ASA 5510</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">RSA SecurID Appliance 3.0 (running latest code)</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";"> </span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">My token is an RSA SecurID SID800</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";"> </span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">Not sure if this is a bug or not but with five days left in the trial I'd like to get a sense of where this stands before I make a decision to commit to purchasing the Shrew Soft client.</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";"> </span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">Thanks,</span></p></div><div><p class="ecxMsoNormal"><span style="font-family:"Calibri","sans-serif";">Colin</span></p></div></div></div></div></div> </div></body>
</html>