VPN Client Compatibility with Windows 7 and Windows Server 2008 R2

rrasblog — Tue, 05 May 2009 11:39:00 GMT

When you upgrade your computer from an older version of Windows to Windows® 7 or Windows Server® 2008 R2, your 3rd-party virtual private network (VPN) client programs might not work. As Windows evolves, sometimes changes to the underlying infrastructure are required to implement new features, and these changes can sometime break compatibility with older programs. While Microsoft makes every effort to maintain compatibility with older programs, there are some categories of programs that are more likely to be impacted by these changes. VPN clients are one of them.

The tables below show the VPN clients available from different vendors. The tables include the minimum version number that has been tested and known to be compatible with Windows 7 and a link to the vendor’s Web site where you can download the client.

Be sure to review the More information column for any important notes that might be relevant to your use of the client.

Notes

· Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

· The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

· AT&T

· Checkpoint

· CISCO

· Citrix

· F5

· Juniper

· NCP

· NetGear

· Nortel

· SafeNet

· Sonic Wall

Ashish Jain

Program Manager

Routing and Remote Access

AT&T

VPN client	Release	Platform	Version	Download URL	More information	Tested on Windows 7 build
IPsec VPN	Final	x86, x64	V7.6.2	Click Here	Found heap corruption issue in the VPN client. Not a blocking issue, and was present on Windows Vista. AT&T working on resolving the issue.	7000

Checkpoint

VPN client	Release	Platform	Version	Download URL	More information
IPsec VPN	Final	x86	NGX R60 HFA2	Expected availability: April 2007 Click Here	Clean installation working with limited testing.
SSL VPN	Final	x86, x64	SNX R66 HFA 01	Expected availability: June 2009 Click Here	SSL Network Extender: Clean installation working with limited testing. Upgrade scenario has been flagged for upgrade block. Click Here
Endpoint Connect	Final	x86	NGX R66	Expected availability: June 2009 Click Here	Clean installation working with limited testing.
Endpoint Connect	Final	x64	NGX R66	Expected availability: June 2009 Click Here	Clean installation working with limited testing.

CISCO

VPN Client	Release	Platform	Version	Download URL	More information	Tested on Windows 7 Build
Cisco AnyConnect VPN Client (SSL VPN)	2.3.x	x86	2.3.x	Click Here	You must have a Cisco.com user account to download.	7048
Cisco AnyConnect VPN Client (SSL VPN)	2.3.x	x64	2.3.x	Click Here	You must have a Cisco.com user account to download.	7048
Cisco VPN Client (IPsec)	Final	X86	5.0.5+	Click Here
Cisco VPN Client (IPsec)	5.0.5+	x64	5.0.5+	Click Here	No official support for this version planned by Cisco. Use the Cisco AnyConnect VPN Client for both Windows 7 and x64 support	7048

Citrix

VPN client	Release	Platform	Version	Date	Download URL	More information	Tested on Windows 7 build
SSL VPN	Final	x86	Access Gateway Standard Edition 4.5.8	Available now	Click Here	VPN client must be re-installed after upgrading from Vista	7000
SSL VPN	Final	x64	Access Gateway Standard Edition	Planned	Not yet available	In development
SSL VPN	Final	x86	Access Gateway Advanced Edition 4.5 HF4	Available now	Click Here	VPN client must be re-installed after upgrading from Vista	7000
SSL VPN	Final	x64	Access Gateway Advanced Edition	Planned	Not yet available	In development
SSL VPN	Final	X86	Access Gateway Enterprise Edition 9.0	Available now	Click Here	Requires server build 9.0.68 or later.	7000
SSL VPN	Final	x64	Access Gateway Enterprise Edition	Planned	Not yet available	In development

F5

VPN client	Release	Platform	Version	Download URL	More information	Tested on Windows 7 build
SSLVPN	Build Stage	x86	Post v.6.03	Expected availability: Q3 2009 Click Here		7000
SSLVPN	Build Stage	x64	Post v.6.03	Expected availability: Q3 2009 Click Here		7000

VPN client

Release

Platform

Version

Download URL

More information

Tested on Windows 7 build

SSLVPN

Build Stage

x86

Post v.6.03

Expected availability: Q3 2009

Click Here

7000

SSLVPN

Build Stage

x64

Post v.6.03

Expected availability: Q3 2009

Click Here

7000

Juniper

VPN client	Release	Platform	Version	Download URL	More information	Tested on Windows 7 build
IPSec VPN	Final	x86	6.5R1 or 6.5Rx	Expected availability: Q3 2009 Click Here	You must have a Juniper.net customer or partner user account. Contact a Juniper sales representative.	7000
SSL VPN	Final	x86	Not shared	Expected availability: Q3 2009 Click Here	You must have a Juniper.net customer or partner user account. Working with limited testing. Juniper’s QA has reported that there are no issues seen, both with upgrade and new install scenarios. For more information: Click Here	7000
	Final	X64		Not yet available	Contact a Juniper sales representative.

NCP

VPN client	Release	Platform	Version	Download URL	More information	Tested on Windows 7 build
IPsec VPN	Beta	x86	9.12		Contact NCP or an NCP dealer representative.	7000
IPsec VPN	Beta	x64	9.12		Contact NCP or an NCP dealer representative.	7000
SSL VPN	Beta	x86	8	Expected availability: April 2009	Contact NCP or an NCP dealer representative.	7000
SSL VPN	Beta	x64	8	Expected availability: April 2009	Contact NCP or an NCP dealer representative.	7000

NetGear

NetGear’s native VPN client is not supported on Windows 7. Instead, the following routers have been tested and work with the Windows 7 native VPN client.

VPN client	Router	Platform	Version	More information	Tested on Windows 7 build
IPSec	FVX538	x86, x64	V3.0.5-23	Expected availability: Sept 2009 Click Here	7000
IPSec	FVS338	x86, x64	V3.0.5-23	Expected availability: Sept 2009 Click Here	7000
IPSec	DGFV338	x86, x64	V3.0.5-23	Expected availability: Sept 2009 Click Here	7000
IPSec	FVS336G	x86, x64	V3.0.5-23	Expected availability: Sept 2009 Click Here	7000
IPSec	FVG318	x86, x64	V2.1.3-10	Expected availability: Sept 2009 Click Here	7000
IPSec	SRXN3205	x86, x64	V3.0.3-19	Expected availability: Sept 2009 Click Here	7000

Nortel

VPN client	Release	Platform	Version	Date	Download URL	More information	Tested on Windows 7 build
IPSec VPN	Beta	x86	10.01	Expected availability: May 2009	Click Here	Only Nortel customers and partners will be able to download the client. Contact your Nortel Representative	7000
IPSec VPN	beta	x64	10.01	Expected availability: May 2009	Click Here	Only Nortel customers and partners will be able to download the client. Contact your Nortel Representative	7000
SSL VPN	Beta	x86	10.01	Expected availability: May 2009	Click Here	Only Nortel customers and partners will be able to download the client. Contact your Nortel Representative	7000
SSL VPN	beta	x64	10.01	Expected availability: May 2009	Click Here	Only Nortel customers and partners will be able to download the client. Contact a Nortel Representative	7000

SafeNet

The existing SoftRemote version of the SafeNet VPN client is not supported on either 32-bit or 64-bit versions of Windows 7. The IPsec Toolkit version named QuickSec, is supported on Windows 7.

VPN client	Release	Platform	Version	Download URL	More information	Tested on Windows 7 build
IPSec Toolkit	Final	x86, x64	QuickSec	Expected availability: Q4 2009 Click Here	Click Here	7000

VPN client

Release

Platform

Version

Download URL

More information

Tested on Windows 7 build

IPSec Toolkit

Final

x86, x64

QuickSec

Expected availability: Q4 2009

Click Here

7000

Sonic Wall

VPN client	Release	Platform	Version	Date	Download URL	More information	Tested on Windows 7 build
IPsec VPN	Final	x86	4.2.6.0305	Beta Available	Click Here	You must have a mysonicwall.com user account to download.	7000
IPsec VPN	Final	x64	4.2.6.0305	Beta Available	Click Here	You must have a mysonicwall.com user account to download.	7000
IPsec VPN	Final	x86	4.0.0.830	10/8/2007	Click Here	You must have a mysonicwall.com user account to download. Requires reinstall after Windows upgrade. Upgrade advice will be shown to the user for this client version. Clean Installation works.

Issues, Resolutions, and Status

The following table contains a list of issues identified during application compatibility testing with the respective resolution or status.

Client Application Name	VPN Vendor	Client Application Version	Known Issue	Solution
Cisco VPN Client	CISCO	5.0.05.0280	Blue screen crash on reboot after installation.	Fixed.
Secure Client	CheckPoint	NGX_R60_HFA2	Upgrade Issue - flag for block.	Not a regression. An upgrade notice is shown during upgrade because the client uses .NET class drivers which are not migrated during upgrade. Users can uninstall and reinstall after upgrade.
Citrix Access Gateway	Citrix	Citrix access gateway (CAG) client version 4603301	Citrix VPN Client is not giving IP address.	Reported on MS-Connect site for 64-bit version. Though we cannot currently reproduce this, our ISV engagement team is working work with Citrix to investigate the issue. Citrix has confirmed that their client works on clean installation. Citrix is in the planning/development stage for 64-bit.
Citrix Access Gateway	Citrix	Citrix access gateway (CAG) client version 4603301	CAG unable to complete connection setup and hangs while Applying Network Policy	Not a regression. An upgrade notice is shown during upgrade because the client uses .NET class drivers which are not migrated during upgrade. Users can reinstall (without having to first uninstall) after the upgrade.
Soft Remote	SafeNet	10.8.4 (32-Bit)	Failed to install adapter due to hard version check in the driver. The VA does not function properly.	Not a regression. An upgrade notice is shown during upgrade that this client application will not work as the client is supported on Windows Vista only. SafeNet’s IPsec toolkit called QuickSec is scheduled to support Windows 7 in 2009 Q4.
		11.1.2 (32-Bit)	While installing, qsfilter.sys crashes.
		11.1.2 (64-Bit)	Fails to install. due to a hard version check.
Global Network Client Managed VPN	AT&T	7.6.0.3005	Network access client does not work.	AT&T working on the fix. Not Windows 7specific issue
SonicWall Global VPN Client	SonicWall	4.0.0	Get an error: Failed to open the IPSec driver	Not a regression. Users can uninstall and reinstall after upgrade. Clean installation on works fine.
Secure Entry Client	NCP	8, 9.12	Version check issue	Fixed by NCP.

Routing and Remote Access Blog : Sonic Wall

VPN Client Compatibility with Windows 7 and Windows Server 2008 R2

AT&T

Checkpoint

CISCO

Citrix

F5

Juniper

NCP

NetGear

Nortel

SafeNet

Sonic Wall

Issues, Resolutions, and Status