64 bit vpn thoughts

[aschwartz71]

So what I am learning is that cisco doesnt have a 64 bit vpn client. This is starting to become an issue at work, with users getting new pcs at home that dont support 64 bit.

We currently have a pix 515e device as our firewall and vpn connection. What options do I have for alternatives for 64 bit users? I know that the vpn anywhere (vpn over https???) only works on asa devices and not on a pix.

Any other ideas?

 

[unclerico]

unfortunately you don't have many options here. i believe this is another way for cisco to force you to upgrade your gear to ASAs. You could do:
- Enable outside access to a terminal server if you have one. this is definitely not the best choice due to various reasons
- Enable PPTP or L2TP RA VPN support on your PIX and use the built in microsoft client. this is the next best thing unfortunately



I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[aschwartz71]

Thats kinda what I was afraid of.

I would rather not allow access to a server via TS thru the pix of course.

I know that they dont want to go back to the pptp vpn from MS. I think I will create a 32bit vm and test with that. Not the best way, but at least somewhat secure.

Thanks for the info. I hope cisco decided to get motivated and actually do this..

 

[unclerico]

I hope cisco decided to get motivated and actually do this..

They did, it's called an upgrade silly

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[aschwartz71]

I thought that PIX and ASA were different, and needed a different piece of hardware.

I assume you mean a hardware upgrade, not software, right??

 

[brianinms]

64 bit clients are supported by the Anyconnect client on the ASA.

 

[ADB100]

- Enable PPTP or L2TP RA VPN support on your PIX and use the built in microsoft client. this is the next best thing unfortunately

I am not sure why the phrase 'unfortunately' was added there as the integrated VPN client in Windows is pretty rebust. Certainly discard the PPTP option, but the L2TP functionality I think is excellent. With Windows 2000, 2003 & XP the highest encryption level is 3DES and with Vista & Server 2008 you have the option of AES (which I think is the default?).
With the admin kit you can create a package so there is an installable for the client and then customise it as you see fit.

HTH

Andy