Proxicast Vpn Client 4.65 Release Notes

Proxicast IPSec VPN Client for Windows Release Notes Release 4.65.003

Proxicast, LLC 312 Sunnyfield Drive, Suite 200 Glenshaw, PA 15116 1-877-77PROXI 1-877-777-7694 1-412-213-2477 Fax: 1-412-492-9386 E-Mail: [email protected] Internet: www.proxicast.com

November 27, 2009

© Copyright 2004-2009, Proxicast LLC. All rights reserved. Proxicast, ProxiOS, LAN-Cell, Card-Guard, Card-Lock and Cell-Sentry are trademarks of Proxicast LLC. Proxicast is a registered trademark of Proxicast, LLC.

1/7

Proxicast IPSec VPN Client for Windows 4.65.003 Release Notes Date: Nov., 27, 2009

Supported Operating Systems: Windows 2000 (Workstation) Windows XP 32-bit. WinXP all service packs, including SP2 Windows Server 2003 32-bit Windows Server 2008 32/64-bit Windows Vista 32/64-bit Windows 7 32/64-bit

Major New Features, Improvements & Fixes:      

Windows 7 32/64 bit OS support Improved support for multiple tunnels More explicit error messages More robust VPN configuration import/export Expanded support for additional PKI services & smart cards Additional localization / language support (Arabic, Hindi & Thai)

2/7

Change History: IPSec VPN Client 4.65 build 003 

Bug Fix: IKE crash (tgbike.exe) in some circumstances like renegotiating user authentication using X-Auth twice and getting a not ok response from X-Auth remote server although initial negotiation was authorized with same login/password.



Bug Fix: Phase2 Authentication SHA-2 algorithm not working properly in Peer2Peer mode.



Bug Fix: Import VPN Configuration windows may take several seconds to appears (win7/Windows Seven only).



Bug Fix: Mismatch in tunnel names in Configuration Panel if multiple tunnels have been configured.



Bug Fix: Configuration Panel might display the wrong tunnel status if multiple tunnels have been configured



Feature: Windows Seven (7) RTM 32/64-bit full compatibility.



Improvement: Easier activation wizard to accept 20 or 24 digit license number.



Improvement: More explicit message instead of error 056 when trying to activate an expired temporary license.



Improvement: Management of temporary license improved and limit extended.



Improvement: Connection Panel slightly redesigned to better display multiple tunnels.



Bug Fix: Import VPN Configuration may cause a crash of IKE in some Windows environments.



Bug Fix: FTP transfer in ESP tunnel creates a BSOD when active mode is set.



Bug Fix: When the user insert again his smartcard after closing tunnel, PIN Windows does not pop up for checking PIN code.



Bug Fix: DoS vulnerability fixed.



Bug Fix: Software might not run properly when USB Drive mode active (i.e. VPN Config moved onto USB Drive) and one of the network drives is inaccessible.



Bug Fix: Use of Certificate from Windows Certificate Store not working properly on Windows XP 32/64-bit.



Bug Fix: Improve warning message in English when global parameters set outside limits.

3/7



Bug Fix: VPN Peer 2 peer not working in aggressive mode.



Bug Fix: VMWare Server and IPSec VPN Client, installed on Windows Vista may cause BSOD. Problem fixed for VMWare but also for Virtual PC, Virtual Box from Sun.



Bug Fix: Crash may occur when importing Certificate .P12 generated by Checkpoint firewall.



Bug Fix: Crash may occur during extremely large data load with NVIDIA Ethernet chipset integrated to mother board or network board based on Realtek chipset.



Bug Fix: USB Drive wizard windows not running on forefront.



Bug Fix: "Alternate WINS Server" address might not be updated when opening a tunnel (Windows7 only).



Bug Fix: Evaluation period might expire at first installation in some rare circumstances with very aggressive desktop firewall settings.



Bug Fix: Network drivers might not be installed properly on Vista 64bit when install path contains spaces.



Bug Fix: Typo in deployment guide in –noactiv and /D switches in command line section.



Bug Fix: Systray icon might disappear when Windows Explorer crash.



Bug Fix: A Software Activation request might be sent malformed during software un-installation.



Bug Fix: The DN value in Certificates OID (Object ID) not correctly parsed leading to an ‘unknown OID’ error message when using comma inside either of the RDNs (i.e. Relative Distinguished Name).



Bug Fix: Crash using some Certificate where private key cannot be read properly (malformed...).



Bug Fix: Changing Phase2 Advanced ‘ID Type’ in Configuration Panel not saved in VPN Configuration file.



Bug Fix: Windows function ‘CryptUIDlgViewContext’ from ‘cryptui.dll’ not available in Windows 2000, however used to view Certificate details in IPSec VPN Client 4.6 and further.



Bug Fix: Not supporting Certificate ‘subjectaltname’ extension properly which generates a ‘subjectaltname invalid length’ error message.



Improvement: Remove the registry key DnSeparator. The Certificate subject is now RFC 4514 based.

4/7



Bug Fix: Transport mode access behind NAT may fail in some VPN configurations.



Bug Fix: Conflict with some other vendor Credential Providers (aka GINA) if already installed.



Bug Fix: Desktop application shortcut and driver not removed during software un-installation.



Bug Fix: Lost of network interface due to new 64-bit network drivers.



Feature: Ability to use Certificates from the Windows Certificate Store which enables smooth integration with any PKI software supporting Windows Certificate Store. When using USB Tokens or Windows Certificate Store, a single Certificate can be selected in case multiple ones have been pre-stored.



Feature: Vista Credential Providers (aka GINA on W2K/WXP) support to enable Windows logon via VPN tunnel or choose to logon on local machine. Known issue: Vista Credential Providers (aka GINA) not working on Vista 64-bit.



Feature: Easy import of smartcard ATR codes which enables easily and quickly new smartcard and USB Token models.



Feature: Arabic, Hindi & Thai languages added.



Feature: Support of SHA-2 algorithm.



Feature: Ability to prevent software upgrade or un-installation if software usage has been protected by password.



Feature: Ability to view all the certificate details like expiration date, issued by, subject and so on.



Feature: Shortcut added to enable debug mode.



Feature: New Oberthur AuthentIC Card v220 USB Token support. See our supported USB Token/Smartcards list.



Improvement: Significant usability improvement of the USB Mode with ability to attach a VPN configuration to a specific computer or to a specific USB drive.



Improvement: Better warning message when the user is entering a wrong password for a USB Token/Smartcard or when the USB Token/Smartcard is locked.



Improvement: Better warning message when software activation error like quota exceeded.



Improvement: More detailed information on some Software Activation errors especially those due to internal activation server errors.



Improvement: Software localization in German.

5/7



Improvement: Changed string in Certificate Import Wizard.



Improvement: Merged menu ‘Help’ and ‘Online support’.



Improvement: Impossible to open a tunnel in case an IP address has been defined as the local IP address (i.e. ‘Phase1’ > ’Interface’) but this address does not exist in the computer.



Bug Fix: VPN Configuration file might not be restored properly after software upgrade on some Windows configuration.



Bug Fix: No access to a NAS shared folders depending on the NAS device. Due to TCP checksum when fragmented IP packet.



Bug Fix: Phase1 LocalID value malformed when certificate uses UTF8 string syntax.



Bug Fix: Oberthur Smartcard not recognized [ATR 3B:7B:18:00:00:00:31:C0:64:77:E9:10:00:01:90:00]. See easy way to add new USB Tokens or Smartcards by importing new ATR codes.



Bug Fix: Unable to read certificates on some smartcards.



Bug Fix: Incoming UDP packets larger than 1672 bytes are not handled properly and may cause bluescreen.



Bug Fix: Software startup time and VPN Configuration import time might be longer than usual when debug mode enabled on some Windows Vista configuration.



Bug Fix: Wrong default remote address point when using VPN Configuration Wizard in peer-to-peer mode and VPN Configuration Wizard has been used before to connect to a VPN Gateway.



Bug Fix: Losing the Pre-Shared Key as soon as user tries to import a Certificate.



Bug Fix: Phase1 & Phase2 names could be changed once only as names were cached by software.



Bug Fix: Changing ‘Remote LAN address’ multiple times might not be saved properly into the VPN Configuration file.



Bug Fix: Command lines /Open and /Close maximize the IPSec VPN Client window even it was minimize by user. Also, command lines /Open, /Close and /stop are not working if the Connection Panel has been opened prior to using them.



Bug Fix: Command lines /Open and /Close not working if tunnel name contains CAPS char.



Bug Fix: Scripts before or after tunnel open or close might not be launched in some circumstances.



Bug Fix: Systray popup to show tunnel progress bar taking focus over other application.

6/7



Bug Fix: Latest zip compression format of the setup was not supported within some computer environments.



Bug Fix: Software un-installation not successfully completed in some cases where software is running and a tunnel is open.



Bug Fix: A click on the systray icon would not maximize the IPSec VPN Client Connection Panel, Configuration Panel or Console windows in case they were minimized.



Bug Fix: A tunnel is shown as open in Connection Panel when a USB Drive is plugged-in, but the tunnel is still shown as open when USB drive is un-plugged although it has been closed.



Bug Fix: Phase 2 Remote LAN address might not be saved properly in some circumstances with multiple VPN tunnels.



Bug Fix: Token PIN code might be asked when tunnel start opening even though no Token is plugged-in, in case ‘Phase 1 Certificate on Token’ and ‘Auto Open on Traffic’ have been configured.



Bug Fix: Software crash if the ‘Remote Gateway’ field is not available in the VPN Configuration file.



Bug Fix: Padding and IP frame total length when using some FTP commands with a web server preventing access through a WindRiver VPN Server.



Bug Fix: Initial DNS not restored when the user closes all tunnels, quit software or reset IKE service, in case two tunnels have been configured to use alternate DNS addresses.



Improvement: PinCode management in X-Auth login/password user interface.



Bug Fix: Compatibility with ePass 2000 reading certificates.

7/7