ISEKI OL-5450-10 manuale d’uso

Corporate Headquarters: Copyright © 2004 Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D CCO Date: December 6, 2004 Part Number OL-5450-10 Note Y ou can f ind the most current documentation for the VPN Client at http:/[...]

Contents 2 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Installation Notes, page 5 New Features in Release 4.0, page 11 Usage Notes, page 14 Open Cav eats, page 37 Cav eats Resolved in Release 4.0.5.D, page 59 Cav eats Resolved in Release 4.0.5.C, page 60 Cav eats Resolved in Release 4.0.5.B, page 60 Cav eats Resolve[...]

3 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Introduction Documentation Feedback, page 96 Obtaining T echnical Assistance, page 96 Obtaining Additional Publications and Information, page 99 Introduction The VPN Client is an application that runs on a Microsoft ® W indows ® -based PC, a Sun ultraSP ARC workstation[...]

System Requirements 4 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 The VPN Client supports the following Cisco VPN de vices: • Cisco VPN 3000 Concentrator Series, V ersion 3.0 and later . • Cisco PIX Fire wall, V ersion 6.2.2(122) or V ersion 6.3(1). • Cisco IOS Routers, V ersion 12.2(8)T and later If you are u[...]

5 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Installation Notes Installation Notes Because of platform differences, the installation instructions for W indo ws and non-W indows platforms also dif fer . • Refer to the VPN Client User Guide for W indows, Release 4.0, Chapter 2, for complete installation instruction[...]

Installation Notes 6 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • jp (Japanese) T o force an English only language install, enter the following command: msiexec /i vpnclient_setup.msi T o force a Canadian French language installation, enter the follo wing command, all on the same line : msiexec /i vpnclient_setup[...]

7 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Installation Notes Installation Notes - Windows Platforms In addition to the installation considerations for Release 4.0.3, Release 4.0.x includes the following installation considerations for W indows users: Installing the VPN Client Software Using InstallShield Install[...]

Installation Notes 8 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 “Cannot f ind the f ile instmsiw .exe (or one of its components). Mak e sure the path and f ilename are correct and that all the required libraries are av ailable. ” -then- “Cannot f ind the f ile MSIEXEC (or one of its components). Make sure the[...]

9 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 New Features in Release 4.0.5 Using the VPN Client • T o use the VPN Client, you need: – Direct network connection (cable or DSL modem and network adapter/interface card), or – Internal or external modem, and • T o connect using a digital certif icate for authent[...]

New Features in Release 4.0.5 10 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Group Authentication is a method that uses pre-shared ke ys for mutual authentication. In this method, the VPN Client and the VPN central-site device use a group name and password to v alidate the connection. This is a symmetrical form of a[...]

11 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 New Features in Release 4.0 3. Conf igure a VPN Group to use the ne w IPSec SA from step 2. The VPN Clients under test for Mutual Group Authentication will be connecting to this group. New Features in Release 4.0 Release 4.0 of the VPN Client software includes the follo[...]

New Features in Release 4.0 12 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Common Graphical Interface for Windows and Mac VPN Clients In Release 4.0, the VPN Client provides a consistent graphical user interface across all supported W indows operating systems and Mac OS X, recognizing that the W indows and Mac opera[...]

13 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 New Features in Release 4.0 Personal Firewall Enhancements In Release 4.0, the VPN Client supports Sygate Personal Fire wall and Sygate Personal Fire wall Pro, V ersion 5.0, Build 1175 and higher . Other supported features new with this release include: • The ability [...]

Usage Notes 14 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Enhancements to GINA Release 4.0.2 includes an improv ed application launch verif ication mechanism employed by the Graphical Identif ication and Authentication (GINA) dynamic-link library (DLL). This af fects only the W indows NT4, W indows 2000, and W indo[...]

15 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes Windows NT Users running W indows NT 4.0 with Service Pack 4 require a hot f ix from Microsoft for proper operation. This f ix is av ailable on the Microsoft GetHostByName API Returns Unbindable Address page: http://support.microsoft.com/support/kb/articles/[...]

Usage Notes 16 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 W ait a minute. If the PC is still not responding, press the reset button. When the PC reboots, it should not run through ScanDisk, indicating the shutdown w as successful in closing all open f iles. This problem may occur on some PCs and not on others, and [...]

17 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes T o work around this problem, do one of the follo wing: • Be sure to disconnect the VPN Client before shutting down. If you are ha ving problems, check your network properties and remov e the WINS entries if they are not correct for your network. • Alter[...]

Usage Notes 18 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Network ICE BlackICE Defender Configuration Network ICE's BlackICE Defender is a traf f ic monitoring security product. If you properly conf igure it, BlackICE Defender can work with the VPN Client. Y ou must conf igure BlackICE Defender for T rusting, [...]

19 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes Adjusting the Maximum Transmission Unit (MTU) Value - Windows Only VPN Encapsulation adds to the ov erall message length. T o avoid refragmentation of packets, the VPN Client must reduce the MTU settings. The default MTU adjusted v alue is 1300 for all adapt[...]

Usage Notes 20 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Connection T ype Procedure Physical Adapters Use the SetMTU utility supplied with the Cisco VPN Client. Dial-up Use the SetMTU utility supplied with the Cisco VPN Client. PPPoE - All V endors Windo ws XP only Use SetMTU PPPoE - EnterNet W indows 98 • On th[...]

21 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes PPPoE - W inPoet Windo ws 98: W inPoet does not provide user control ov er the PPPoE MTU under W indows 98. W indows 2000 W inPoet does not provide a user interface to control the MTU size, b ut you can control it by explicitly setting the follo wing registr[...]

Usage Notes 22 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Asante FR3004 Cable/DSL Routers Require Asante Firmware Version 2.15 or Later V ersions of the Asante f irmware caused a problem with reke ying and keepaliv es when a VPN Client had an all-or-nothing connection to a VPN Concentrator through an Asante FR3004 [...]

23 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes America Online (AOL) Interoperability Issues AOL Versions 5.0 and 6.0 The VPN Client supports A OL V ersion 5.0. A OL V ersion 6.0 is also supported, with one limitation: when connected, bro wsing in the network neighborhood is not av ailable. AOL Version 7.[...]

Usage Notes 24 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Browser Interoperability Issues The following kno wn issues might occur when using the VPN Client with the indicated browser softw are. Issues Loading Digital Certificate from Microsoft Certificate Store on Windows NT SP5 and on IE 4.0 SP2 The follo wing err[...]

25 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes Entrust Entelligence Issues The following kno wn issues might occur when using Entrust Entelligence software with the VPN Client. Potential Connection Delay Using the VPN Client with Entrust Entelligence might result in a delay of approximately 30 seconds if[...]

Usage Notes 26 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • Once connected, right click on the Entrust tray icon (gold ke y) and uncheck “W ork Off line”. This manually puts Entrust online (CSCdu33638). Use Entrust Entelligence 4.0 with VPN Client Release 3.5.1 or 3.1 Start Before Logon When using the Release[...]

27 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes Accessing Online Glossary Requires Connection to Cisco.com The Glossary button at the top of all Help screens tries to contact uni vercd at www .cisco.com (the Cisco documentation site). This connection requires connecti vity to Cisco's main web site. I[...]

Usage Notes 28 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 ZoneLabs Automatically Adds Loopback and VPN 3000 Concentrator Addresses to Trusted Zone for Windows NT PCs The Loopback address and the VPN 3000 Concentrator’ s address are automatically added to the ZoneLabs “T rusted Zone” on Windo ws NT -based syst[...]

29 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes DHCP Route Renewal in Windows 2000 and Windows XP In a W indows 2000 or W indows XP en vironment, if the public network matches the priv ate network (for example, a public IP address of 192.168.1.5, with a subnet mask of 255.255.0.0, and an identical priv at[...]

Usage Notes 30 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 The VPN Client, Release 4.0, with V irtual Adapter attempts to modify local route metrics to allo w data to pass ov er the VPN tunnel. In some cases, it is impossible for the VPN Client to make this modif ication (CSCdz38680). T o work around this problem, m[...]

31 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes VPN Client Supports Sygate Personal Firewall V. 5.0, Build 1175 The supported version of Sygate Personal Fire wall is version 5.0, b uild 1175. Earlier versions might cause the follo wing Blue screen to occur on a Windo ws NT -based system that has made many[...]

Usage Notes 32 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Start Before Logon and Microsoft Certificate with Private Key Protect Fails T rying to connect the VPN client using Start Before Logon (SBL) and Microsoft Machine-based certif icates fails. This is a Microsoft issue, not a VPN Client problem. If your certif [...]

33 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes Step 3 Rename csgina.dll to something like csgina.old. Step 4 Install the VPN Client version 3.6. Linksys Wireless AP Cable/DSL Router Version 1.44 or Higher Firmware Requirement T o use the VPN Client behind a Linsksys W ireless AP Cable/DSL router model BE[...]

Usage Notes 34 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 On the Mac OS X platform, Internet Explorer 5.2 that comes installed does not allo w certif icates to be exported. The best course of action for these users is to either enroll and export the certif icate from a W indows workstation and email it to the Mac u[...]

35 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Usage Notes Use Zone Labs Integrity Server 2.1.052.0 or Higher with VPN Client 4.0 V ersions of the Zone Labs Integrity Serv er earlier than 2.1.052.0 exhibit the following problem. If tw o or more VPN Clients (running on Windo ws 2000 or XP) are connected to a VPN 3000[...]

Usage Notes 36 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 The InstallShield Knowledge base article q108020 addresses this problem. T o vie w this article go to the following URL (CSCea43117): http://support.installshield.com/kb/view .asp?articleid=q108020 Microsoft has a f ix for this issue. For more information an[...]

37 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats Open Caveats Cav eats describe unexpected behavior or defects in Cisco software releases. The following lists are sorted by identif ier number . Note If you hav e an account with CCO, you can use Bug Navigator II to f ind cav eats of any se verity for any r[...]

Open Caveats 38 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 If the VPN Client is uninstalled, the next time the NTS EnterNet 300 PPPoE version 1.41 is used the message, “EnterNet could not f ind the (adapter). But it did locate the (adapter) through which your network server is reachable. Do you want to switch? Y [...]

39 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats W orkar ound : For problem dialers/applications, try 2500 milliseconds or greater . • CSCdu22174 SCEP enrollment might fail to complete successfully after the PKI administrator has granted your request. W orkar ound : If this happens, delete your failed r[...]

Open Caveats 40 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Step 4 The user returns and enters the Entrust password, then clicks Y es to the security hash check question. Step 5 The VPN connection completes, and data can be passed. The VPN dialer appears as not connected. Step 6 Clicking Connect returns “ A connec[...]

41 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats • CSCdu81905 When connecting to a VPN 3000 Concentrator ov er PPPoE using the EnterNet 300 client software from Ef f icient Networks, Inc., if a f irewall is required by the VPN Concentrator , the following message might appear: “The Client did not matc[...]

Open Caveats 42 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Others like 3COM 3C510, and D-Link DI-704 either had updated f irmware that was tested and failed, or had Beta f irmware that was NO T tested because the f irmware notes did not indicate a f ix specif ically for fragmentation. • CSCdu87521 The follo wing [...]

43 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats or – Use Gemplus version 3.0.30 that no longer installs the gemgina.dll • CSCdv46591 When a CPP Fire wall policy is in place that drops all inbound and outbound traff ic and no WINS address is sent to the VPN Client from the 3000 series Concentrator , S[...]

Open Caveats 44 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 The f irst command ensures that the target is reachable, and the second determines whether fragmentation is an issue. W orkar ound : Step 1 Before opening the tunnel, bring do wn the MTU of the point-to-point interface to the MTU of the rest of the path to [...]

45 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats • CSCdv67594 The follo wing Microsoft Outlook error might occur when the VPN Client connects or disconnects. This occurs when Microsoft Outlook is installed but not conf igured. Either there is no default mail client or the current mail client cannot fulf[...]

Open Caveats 46 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCdw73886 If an attempt to load the VPN Client is made before the Clients Service loads, the follo wing error occurs: “The necessary VPN sub-system is not av ailable. Y ou will not be able to make a connection to the remote IPSec server . ” W orkar[...]

47 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats • CSCdx51632 If the computer is po wered off or loses po wer during an MSI installation of the VPN Client, the VPN Client may not be registered in Control P anel, and the following may occur when attempting to reinstall: – A message may appear stating: [...]

Open Caveats 48 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCdx77292 Microsoft article Q234859 states that for the resiliency feature to w ork on W indows 4.0, IE 4.01 sp1 and shell32.dll v ersion 4.72.3110.0 or greater must be installed on the computer . • CSCdx78868 The Microsoft Installer (MSI) resiliency[...]

49 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats This is most likely to happen when Start Before Logon and Auto Initiate are being used on a W indows NT/2000/XP system. W orkar ound: This is due to the fact that the VPN Client dialer is already running on the “logon desktop”. Most likely during W indo[...]

Open Caveats 50 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCdy70168 A user with the VPN Client cannot establish an IPSec tunnel to a VPN Concentrator running ov er an Internet satellite connection. There are three observed results: – User is ne ver prompted for XA UTH username and password. – After succes[...]

51 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats Step 3 Change to the Adv anced T ab and uncheck the “Internet Connection Firew all” option. • CSCdz56076 Some A OL applications might not be usable while a 4.0 VPN Client connection is acti ve. These include the A OL integrated web bro wser and some i[...]

Open Caveats 52 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 0.0.0.0 255.255.255.255 n.n.n.n n.n.n.n 1 Where n.n.n.n is the IP address assigned to the VPN. W orkar ound : This is due to a misconf iguration on the VPN3000 at the central site. Make sure that the Group | Client Conf ig settings for Split T unneling Poli[...]

53 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats Caution This procedure contains information about editing the registry . Before you edit the registry , make sure you understand ho w to restore it if a problem occurs. Note If you disable, then re-enable Start before Logon, this entry is added again and mu[...]

Open Caveats 54 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Step 5 When the PC boots back up, the client will launch normally . • CSCea25682 The follo wing Notif ication might occur if the Cisco Systems Integrated Client is required to make a connection: “The Client did not match the f irew all conf igured on th[...]

55 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats • CSCea62229 Using the 4.0 VPN Client with Entrust Entelligence certif icates, the “Send CA Certif icate Chain” option should be grayed out and unav ailable, but it is not. W orkar ound : Checking the “Send CA Certif icate Chain” option when using[...]

Open Caveats 56 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCea92185 The PKCS#10 thumbprint for the certif icate request is missing on 4.x VPN Client, so it is impossible for the CA to verify the user's request by comparing the thumbprint. W orkar ound : Do wngrade to 3.6.X VPN Client. • CSCea93535 Perf[...]

57 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Open Caveats W orkar ound : Use T ime Lifetime on the VPN 3000 Concentrator . • CSCec18923 After the Cisco VPN Client is connected, the PC stops receiving the local multicast traff ic. The “ Allow Local LAN Access” check box is checked, and the multicast addresses[...]

Open Caveats 58 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCed11256 When installing a customized VPN Client InstallPath, a pop-up box appears during the installation with the following message: Usage: V AInstaller i <INF Location> <HardwareID> r <HardwareID> f <HardwareID> Options: i -[...]

59 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.5.D Caveats Resolved in Release 4.0.5.D Release 4.0.5.D resolves the follo wing issues: • CSCed49306 If a user is member of at least 500 groups in the domain (W in2000), the VPN Client cannot open a connection. A message in the log says[...]

Caveats Resolved in Release 4.0.5.C 60 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.5.C Release 4.0.5.C resolves the follo wing issues: • CSCeb04745 Can't Install the V irtual Adapter after removing a VPN 5000 client. This happens because some of the VPN 5000 Registry ke ys are [...]

61 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.5.A Caveats Resolved in Release 4.0.5.A Release 4.0.5.A resolves the follo wing issues: • CSCdz58488 Cisco-proprietary N A T Transparenc y can be enabled in environments where N A T/P A T is not used, but perhaps a f irewall allo ws UDP[...]

Caveats Resolved in Release 4.0.5 62 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCef15043 When connecting from the VPN Client to the VPN 3000 Concentrator , with Cisco Pushed Policy enabled, the Fire wall tab on the VPN Client is disabled and is therefore unusable. • CSCef50703 The VPN Client cannot load a c[...]

63 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.4.D The client should allo w users to just enter the CertName f ield in the prof ile. The VPN Client should not force the use of SubjectName, as it is long and hard to enter in the prof ile. The CertName f ield for the abov e subject name[...]

Caveats Resolved in Release 4.0.4.D 64 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 W ith this change, ALL interface networks will be excluded so that the user will be able to access their home network o ver Ethernet while connected to the tunnel ov er PPP . Should they ha ve two Ethernets, the same would apply . Pri[...]

65 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.4.B • CSCee66699 When trying to install the 4.0.4 version of the VPN Client on a W indows 2000 PC which was b uilt with a ghost image, we get the error, "Error 28001 MS TCP/IP is not installed" and cannot install the VPN Clien[...]

Caveats Resolved in Release 4.0.4.B 66 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCee30728 When the VPN Client Release 4.0.3.F is installed, uninstalled, and reinstalled, the VPN Client cannot establish a tunnel. The client logs hav e the message: Failed to initialize the ipsec driver! Returned 1 • CSCee504[...]

67 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.4 The problem is, the client installs the stateful f irew all on the machine. It trips ov er stateful f irewall (if it is not started) e ven when customers don't hav e the stateful f irew all turned on. As a f ix, if the stateful f i[...]

Caveats Resolved in Release 4.0.3.F 68 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCed80758 The VPN Client stat repeat command produces the follo wing error when the client disconnects: INTERN AL ERROR: INV ALID REASON CODE This is only a message from theVPN Client stat command and does not indicate any proble[...]

69 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.3.E Caveats Resolved in Release 4.0.3.E Release 4.0.3.E resolves the follo wing issues: • CSCea04848 The silent disconnect option of VPN Client for W indows does not suppress the message: “Do you wish to disconnect your Dialup Network[...]

Caveats Resolved in Release 4.0.3.C 70 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCeb41256 A VPN Client, version 4.0.1, can't initialize the virtual adapter while attempting an IPSEC connection after “undocking” from a docking station. When attempting a connection the following message appears in the[...]

71 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.3.C • CSCea65393 Using the 4.0 VPN Client with the virtual adapter (W indows 2000 or W indows XP) in a multiple NIC en vironment, the VPN Client might not pass data while connected. When the VPN Client PC has multiple network interfaces[...]

Caveats Resolved in Release 4.0.3.B 72 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCec78515 When a prof ile that uses a certif icate is used to establish a connection to the central site, the VPN GUI verif ies the certif icate before establishing the connection. But because of this problem, it verif ies the f [...]

73 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.3 • CSCec42345 Using W indows NT 4.0, SP 6, and W indows XP Home, the VPN Clients CLI cannot start a third-party dial-up program when a connection prof ile is conf igured to do so. The following error appears: “The third-party dial-up[...]

Caveats Resolved in Release 4.0.2.E 74 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 – If not checked, Split-DNS functions normally , but after disconnecting from the internet, it nev er refers to the DNS of the Internet side. • CSCeb47765 Name resolution can take up to 40 seconds when a tunnel has been establishe[...]

75 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.2.D T o activ ate “Start before Logon”, oem.ini and vpnclient.ini are present in the installation package. Once the machine is rebooted after the installation, the “Start before Logon” feature does not work. • CSCeb12483 When ma[...]

Caveats Resolved in Release 4.0.2.C 76 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCeb74792 The silent uninstall feature of the VPN client does not uninstall the Prof iles and certif icates folder from the Program Files folder: C:Program FilesCisco SystemsVPN Client • CSCeb80558 If vpnclient.ini option ?[...]

77 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.2.B • CSCeb21138 At VPN Client initialization, the version string is o verlaid in te xt on top of the splash screen. There is no may to modify this string for OEM customization. It should be remov ed. Caveats Resolved in Release 4.0.2.B[...]

Caveats Resolved in Release 4.0.2.A 78 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCeb52019 DNS suff ix search list gets replaced when CVPN Client 4.x is used for VPN tunnel establishment. • CSCeb54855 Unable to autopopulate the CertSerialHash value in the .PCF f ile. The customer creates a customized prof i[...]

79 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.2 Caveats Resolved in Release 4.0.2 Release 4.0.2 resolves the follo wing issues: • CSCdz32866 The Macintosh OS X version of VPN Client does not sa ve the location & size of the external Log W indow so it must be resized and mo ved [...]

Caveats Resolved in Release 4.0.2 80 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCea65315 Rebranding the VPN Client Release 4.0 for Mac OS X is not currently possible. If you drop a png f ile into the Resources folder of the installer disk image, when you install the VPN Client, the png f ile is not copied int[...]

81 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0.1 • CSCeb35613 Cvpnd.ex e (Cisco VPN Service) crashes when trying to establish a tunnel. If you run into this problem, the last entry in the logs should say: Unable to forward xAuth request data to xAuth application. Error code <erro[...]

Caveats Resolved in Release 4.0.1 82 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCea47454 Buttons in Certif icates->Import/Export windows are truncated when using system Large F onts (120dpi) setting. • CSCea76011 IPSec ov er TCP and/or Split tunneling does not work on certain machines. This issue is the [...]

83 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0 The le vel for this message should be changed and this f ile should probably be documented. Caveats Resolved in Release 4.0 This section lists the cav eats f ixed since Release 3.6.3 (W indows) or Release 3.7.2 (Linux, Solaris, and Mac OS[...]

Caveats Resolved in Release 4.0 84 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCdx89940 A Restricted, Standard, or Limited user (W indows 2000) cannot install the VPN Client using the W indows Installer (MSI), e ven if elev ated privile ges are set for the user and the PC. • CSCdy30098 While using the Solari[...]

85 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0 • CSCdz09585 If you select “Delete” from within the Certif icate tab, you are prompted with the follo wing message: “ Are you sure you want to delete the certif icate?” In that windo w , there is an 'X' in the upper ri[...]

Caveats Resolved in Release 4.0 86 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 In this case, the VPN Client is installed on a PC with Smartcard-based certif icates or Entrust Entelligence-based certif icates. The VPN Client attempts to enumerate the list of installed certif icates, including ones that are Smartcard-[...]

87 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0 • CSCdz52058 If you attempt to Import a Connection Entry with the same name as one that already exists, you are asked if you w ould like to overwrite the e xisting entry . If you choose to ov erwrite the entry , an error appears and the[...]

Caveats Resolved in Release 4.0 88 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCdz83065 Uninstalling the VPN Client using the Microsoft Installer (MSI) does not detect that the VPN Client is connected and the uninstall completes. W e highly recommend you disconnect and exit the VPN Client before uninstalling. [...]

89 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0 This is most commonly seen in an en vironment where the VPN Client is behind a N A T device that is using a common pri vate IP address range like 10.x.x.x. • CSCea03326 The feature that was added in Release 3.6.2 called “ Automatic lo[...]

Caveats Resolved in Release 4.0 90 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 If you are a Cisco employee, you MUST f irst check to see if you have the Cisco IT 3.5(A) version of the VPN Client installed and manually uninstall it before installing the 4.0 VPN Client. • CSCea05304 The 4.0 VPN Client feature, Delet[...]

91 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0 • CSCea13071 On the VPN Client for Mac, the Release 4.0 VPN Client banner is smaller than the 3.x VPN Client banner and may not display your entire banner and your users may hav e to use the scroll bar to see the entire message. • CSC[...]

Caveats Resolved in Release 4.0 92 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • CSCea20120 Using Start before Logon, if you press ENTER to try to connect, depending on what T AB you left the VPN Client in last time, it either does nothing or sho ws a Cert V iew for one of your Certif icates. Y ou must click Conne[...]

93 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Caveats Resolved in Release 4.0 • CSCea35592 The VPN Client e vent log displays the follo wing events on W indows 2000 and/or W indows XP systems: 76 14:14:51.082 03/04/03 Sev=W arning/2CVPND/0xA3400011 Could not f ind (null) in IpHlpApi.DLL These e vents will only ap[...]

Documentation Updates 94 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Documentation Updates The following VPN Client documentation has been updated for Release 4.0. These documents contain information for all platforms on which the VPN Client runs: • VPN Client Administrator Guide, Release 4.0 • VPN Client User G[...]

95 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Obtaining Documentation Removing a VPN Client Version Installed with MSI Installer In VPN Client User Guide for W indows, Release 4.0 , in the section “Removing a VPN Client V ersion Installed with MSI Installer, ” (page 2-8 in the hard-copy edition), in Steps 4 and[...]

Documentation Feedback 96 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Ordering Documentation Y ou can f ind instructions for ordering documentation at this URL: http://www .cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm Y ou can order Cisco documentation in these ways: • Registered Cisco.com users (Cisco direct cus[...]

97 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Obtaining Technical Assistance Cisco Technical Support Website The Cisco T echnical Support W ebsite provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is av ailable 24 hours a day , 3[...]

Obtaining Technical Assistance 98 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 For S1 or S2 service requests or if you do not ha ve Internet access, contact the Cisco T AC by telephone. (S1 or S2 service requests are those in which your production network is do wn or severely de graded.) Cisco T A C engineers are ass[...]

99 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 Obtaining Additional Publications and Information Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is av ailable from various online and printed sources. • Cisco Marketplace pro vides a variety of [...]

Obtaining Additional Publications and Information 100 Release Notes for VPN Client, Release 4.0 through Release 4.0.5.D OL-5450-10 • Internet Pr otocol Journal is a quarterly journal published by Cisco Systems for engineering professionals in volved in designing, de veloping, and operating public and priv ate internets and intranets. Y ou can acc[...]