Windows XP SP2: Hari-Kari for Cisco’s VPN Client Software?

August 23, 2004 - unless you have been living in a remote networking closet, you probably know Microsoft has recently published a long-awaited Service Pack 2 (SP2) update its Windows XP operating system.

On the basis of this inventory to meet the basic safety overhaul, it gives the Windows XP operating system, but many analysts have asked Microsofts most important sp deliverable. There is only one catch up, but: SP2 in the notable enhanced security model, can break compatibility with some applications, especially software from third-party vendors - Cisco Systems.

The beginning of this month, of which at least contribute to the list of services at ntbugtraq This breakthrough in the effective unknown SP2 version of Ciscos VPN client with his company. Because there are so many applications of the SP2 problems, the culprit appears to be Windows Firewall, which is now enabled by default.

"Win-win XP SP2 installed, Cisco VPN client no longer applies, unless you close Windows Firewall. After some troubleshooting, the problem seems to be Windows Firewall will involve how to deal with work, the port address translation ", the user wrote . "I run Ciscos customers either TCP or UDP package. Neither seems to be working. " Not all users have such bad luck, of course. A ntbugtraq Contributor: he had successfully used several different versions of the Cisco VPN client (version 3.5.4 , 4.0.4d, 4.0.5), UDP / NAT with the Windows firewall, the first since SP2 version of the test without any difficulty.

For the record, Microsoft is not on the list, Ciscos VPN client, in its application list affected (one way or another) 2. But In "br> Despite the countrys experience, at least one user, not everyone is willing to give Ciscos VPN client generates a clean SP2 preparations for the health bill.

"[Ntbugtraq Contribute] Brad metzler said that his requests for assistance were told They said that they needed Ciscos VPN (not Cisco Security VPN) client version 4. x and above, so as to avoid compatibility problems with XP SP2, "wrote Cooper, who edited by Russ ntbugtraq list of services and professional security and trusecure companies, "They are laying 4.0.5 initiative, in order to avoid problems.

These problems were discovered in the testing stage. " To do the trick, Cooper through from the other side ntbugtraq Contributor Christopher is Heaishi, they found that managers must create Windows firewall rules TCP port 10000 and UDP port 4500 and 62515 in order to Cisco VPN access to the work.

- Stephen swoyer