When you upgrade your computer from an older version of Windows to Windows® 7 or Windows Server® 2008 R2, your 3rd-party virtual private network (VPN) client programs might not work. As Windows evolves, sometimes changes to the underlying infrastructure are required to implement new features, and these changes can sometime break compatibility with older programs. While Microsoft makes every effort to maintain compatibility with older programs, there are some categories of programs that are more likely to be impacted by these changes. VPN clients are one of them.
The tables below show the VPN clients available from different vendors. The tables include the minimum version number that has been tested and known to be compatible with Windows 7 and a link to the vendor’s Web site where you can download the client.
Be sure to review the More information column for any important notes that might be relevant to your use of the client.
Notes
· Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
· The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.
· AT&T
· CISCO
· Citrix
· F5
· Juniper
· NCP
· NetGear
· Nortel
· SafeNet
Ashish Jain
Program Manager
Routing and Remote Access
AT&T
VPN client | Release | Platform | Version | Download URL | More information | Tested on Windows 7 build |
IPsec VPN | Final | x86, x64 | V7.6.2 | Found heap corruption issue in the VPN client. Not a blocking issue, and was present on Windows Vista. AT&T working on resolving the issue. | 7000 |
Checkpoint
VPN client | Release | Platform | Version | Download URL | More information |
IPsec VPN | Final | x86 | NGX R60 HFA2 | Expected availability: April 2007 | Clean installation working with limited testing. |
SSL VPN | Final | x86, x64 | SNX R66 HFA 01 | Expected availability: June 2009 | SSL Network Extender: Clean installation working with limited testing. Upgrade scenario has been flagged for upgrade block. |
Endpoint Connect | Final | x86 | NGX R66 | Expected availability: June 2009 | Clean installation working with limited testing. |
Endpoint Connect | Final | x64 | NGX R66 | Expected availability: June 2009 | Clean installation working with limited testing. |
CISCO
VPN Client | Release | Platform | Version | Download URL | More information | Tested on Windows 7 Build |
Cisco AnyConnect VPN Client (SSL VPN) | 2.3.x | x86 | 2.3.x | You must have a Cisco.com user account to download. | 7048 | |
Cisco AnyConnect VPN Client (SSL VPN) | 2.3.x | x64 | 2.3.x | You must have a Cisco.com user account to download. | 7048 | |
Cisco VPN Client (IPsec) | Final | X86 | 5.0.5+ | |||
Cisco VPN Client (IPsec) | 5.0.5+ | x64 | 5.0.5+ | No official support for this version planned by Cisco. Use the Cisco AnyConnect VPN Client for both Windows 7 and x64 support | 7048 |
Citrix
VPN client | Release | Platform | Version | Date | Download URL | More information | Tested on Windows 7 build |
SSL VPN | Final | x86 | Access Gateway Standard Edition 4.5.8 | Available now | VPN client must be re-installed after upgrading from Vista | 7000 | |
SSL VPN | Final | x64 | Access Gateway Standard Edition | Planned | Not yet available | In development | |
SSL VPN | Final | x86 | Access Gateway Advanced Edition 4.5 HF4 | Available now | VPN client must be re-installed after upgrading from Vista | 7000 | |
SSL VPN | Final | x64 | Access Gateway Advanced Edition | Planned | Not yet available | In development | |
SSL VPN | Final | X86 | Access Gateway Enterprise Edition 9.0 | Available now | Requires server build 9.0.68 or later. | 7000 | |
SSL VPN | Final | x64 | Access Gateway Enterprise Edition | Planned | Not yet available | In development |
F5
VPN client | Release | Platform | Version | Download URL | More information | Tested on Windows 7 build |
SSLVPN | Build Stage | x86 | Post v.6.03 | Expected availability: Q3 2009 | 7000 | |
SSLVPN | Build Stage | x64 | Post v.6.03 | Expected availability: Q3 2009 | 7000 |
Juniper
VPN client | Release | Platform | Version | Download URL | More information | Tested on Windows 7 build |
IPSec VPN | Final | x86 | 6.5R1 or 6.5Rx | Expected availability: Q3 2009 | You must have a Juniper.net customer or partner user account. Contact a Juniper sales representative. | 7000 |
SSL VPN | Final | x86 | Not shared | Expected availability: Q3 2009 | You must have a Juniper.net customer or partner user account. Working with limited testing. Juniper’s QA has reported that there are no issues seen, both with upgrade and new install scenarios. For more information: | 7000 |
Final | X64 | Not yet available | Contact a Juniper sales representative. |
NCP
VPN client | Release | Platform | Version | Download URL | More information | Tested on Windows 7 build |
IPsec VPN | Beta | x86 | 9.12 | Contact NCP or an NCP dealer representative. | 7000 | |
IPsec VPN | Beta | x64 | 9.12 | Contact NCP or an NCP dealer representative. | 7000 | |
SSL VPN | Beta | x86 | 8 | Expected availability: April 2009 | Contact NCP or an NCP dealer representative. | 7000 |
SSL VPN | Beta | x64 | 8 | Expected availability: April 2009 | Contact NCP or an NCP dealer representative. | 7000 |
NetGear
NetGear’s native VPN client is not supported on Windows 7. Instead, the following routers have been tested and work with the Windows 7 native VPN client.
VPN client | Router | Platform | Version | More information | Tested on Windows 7 build |
IPSec | FVX538 | x86, x64 | V3.0.5-23 | Expected availability: Sept 2009 | 7000 |
IPSec | FVS338 | x86, x64 | V3.0.5-23 | Expected availability: Sept 2009 | 7000 |
IPSec | DGFV338 | x86, x64 | V3.0.5-23 | Expected availability: Sept 2009 | 7000 |
IPSec | FVS336G | x86, x64 | V3.0.5-23 | Expected availability: Sept 2009 | 7000 |
IPSec | FVG318 | x86, x64 | V2.1.3-10 | Expected availability: Sept 2009 | 7000 |
IPSec | SRXN3205 | x86, x64 | V3.0.3-19 | Expected availability: Sept 2009 | 7000 |
Nortel
VPN client | Release | Platform | Version | Date | Download URL | More information | Tested on Windows 7 build |
IPSec VPN | Beta | x86 | 10.01 | Expected availability: May 2009 | Only Nortel customers and partners will be able to download the client. Contact your Nortel Representative | 7000 | |
IPSec VPN | beta | x64 | 10.01 | Expected availability: May 2009 | Only Nortel customers and partners will be able to download the client. Contact your Nortel Representative | 7000 | |
SSL VPN | Beta | x86 | 10.01 | Expected availability: May 2009 | Only Nortel customers and partners will be able to download the client. Contact your Nortel Representative | 7000 | |
SSL VPN | beta | x64 | 10.01 | Expected availability: May 2009 | Only Nortel customers and partners will be able to download the client. Contact a Nortel Representative | 7000 |
SafeNet
The existing SoftRemote version of the SafeNet VPN client is not supported on either 32-bit or 64-bit versions of Windows 7. The IPsec Toolkit version named QuickSec, is supported on Windows 7.
VPN client | Release | Platform | Version | Download URL | More information | Tested on Windows 7 build |
IPSec Toolkit | Final | x86, x64 | QuickSec | Expected availability: Q4 2009 | 7000 |
Sonic Wall
VPN client | Release | Platform | Version | Date | Download URL | More information | Tested on Windows 7 build |
IPsec VPN | Final | x86 | 4.2.6.0305 | Beta Available | You must have a mysonicwall.com user account to download. | 7000 | |
IPsec VPN | Final | x64 | 4.2.6.0305 | Beta Available | You must have a mysonicwall.com user account to download. | 7000 | |
IPsec VPN | Final | x86 | 4.0.0.830 | 10/8/2007 | You must have a mysonicwall.com user account to download. Requires reinstall after Windows upgrade. Upgrade advice will be shown to the user for this client version. Clean Installation works. |
Issues, Resolutions, and Status
The following table contains a list of issues identified during application compatibility testing with the respective resolution or status.
Client Application Name | VPN Vendor | Client Application Version | Known Issue | Solution |
Cisco VPN Client | CISCO | 5.0.05.0280 | Blue screen crash on reboot after installation. | Fixed. |
Secure Client | CheckPoint | NGX_R60_HFA2 | Upgrade Issue - flag for block. | Not a regression. An upgrade notice is shown during upgrade because the client uses .NET class drivers which are not migrated during upgrade. Users can uninstall and reinstall after upgrade. |
Citrix Access Gateway | Citrix | Citrix access gateway (CAG) client version 4603301 | Citrix VPN Client is not giving IP address. | Reported on MS-Connect site for 64-bit version. Though we cannot currently reproduce this, our ISV engagement team is working work with Citrix to investigate the issue. Citrix has confirmed that their client works on clean installation. Citrix is in the planning/development stage for 64-bit. |
Citrix access gateway (CAG) client version 4603301 | CAG unable to complete connection setup and hangs while Applying Network Policy | Not a regression. An upgrade notice is shown during upgrade because the client uses .NET class drivers which are not migrated during upgrade. Users can reinstall (without having to first uninstall) after the upgrade. | ||
Soft Remote | SafeNet | 10.8.4 (32-Bit) | Failed to install adapter due to hard version check in the driver. The VA does not function properly. | Not a regression. An upgrade notice is shown during upgrade that this client application will not work as the client is supported on Windows Vista only. SafeNet’s IPsec toolkit called QuickSec is scheduled to support Windows 7 in 2009 Q4. |
11.1.2 (32-Bit) | While installing, qsfilter.sys crashes. | |||
11.1.2 (64-Bit) | Fails to install. due to a hard version check. | |||
Global Network Client Managed VPN | AT&T | 7.6.0.3005 | Network access client does not work. | AT&T working on the fix. Not Windows 7specific issue |
SonicWall Global VPN Client | SonicWall | 4.0.0 | Get an error: Failed to open the IPSec driver | Not a regression. Users can uninstall and reinstall after upgrade. Clean installation on works fine. |
Secure Entry Client | NCP | 8, 9.12 | Version check issue | Fixed by NCP. |