|| ||

|||| ||||
..:||||||:..:||||||:..
|| ||
c i s c o

readme file
=========================================================================

revisions:
5.0.03.0560.

files:
vpnclient-win-msi-5.0.03.0560-k9.exe - windows 2000, xp and vista - 32bit only.

prerequisite: windows6.0-kb952876-x86.msu

advisory:
the new client requires a kernel patch, kb952876, from microsoft before
installing first before installing the actual client.

ref: http://support.microsoft.com/kb/952876/en-us

cscsk37470 provides the ability for users to upgrade from an is based install
to msi using without having to manually remove the is package first.

vpn client takes longer to connect on vista compared to xp. this is due to
new features in vista.

the cisco vpn client for windows vista does not support the following:

* system upgraded from windows xp to vista (clean os installation required).

* start before logon
* integrated firewall - see workaround below.
* installshield
* 64bit support
* autoupdate
* translated online help - provided only in english

if you are experiencing a bluescreen on xp related to the vpn client built-in

client, please follow the workaround below.

known issues:
cscsf10635 unity client disconnect-verizon evdo/at&t 3g card changed ip .
cscsi25985 unity vista: user not prompted to reconnect after sleep or hibernation
cscsi26001 unity xp-vista: reauth on rekey with saved password causes disconnect
cscsi26020 unity vista: firewall tab under stats still shows
cscsi26050 unity vista: installshield packge does not work on vista
cscsi26069 unity vista: error 1721 when installing client on vista 64bit
cscsi26086 unity vista: upgrading from xp to vista not supported
cscsi26159 unity vista: bsod during install/uninstall/sleep with active ras
cscsi26229 unity vista: integrated firewall not installed on vista
cscsi35107 unity vista: start before login �sbl� not functioning
cscec02663 auto initiation fails on 9x/vista on boot up
resolved issues:
5.0.03.0560:
cscsq66183 unity: vista netsh\wmi code unreliable
requires: kb952876
cscsq03188 vista 32 bit hangs with vpn client 5.0.3 if connecting over dial-up ppp
cscso44260 vista client reason 403 error and ip address conflict

5.0.03.0530:
cscsl01951 unitiy securid new pin mode fails to prompt when token is reassigned
cscsk21956 unity vista dad registry change for 442 crutch
cscsk64036 cvpn client 5.0 - default gateway disappears in ipconf output
cscsm22120 vpn client ipsec driver local kernel system pool corruption
cscsm48457 unity vista certificate strong key high security import secure desktop
cscsl58301 vpn client 5.0.02.0090 takes 25 minutes to install w active directory
ad
cscsl66524 unity windows rsa securid new pin mode fails twice with invalid
password
cscso79625 unity vista: client won't connect after hard power reset
cscso33820 unity vista beta routing persistent routes
cscso28380 unity vista sleep causes reboot or blue screen
cscso31614 unity windows: need to put the change to reset smart card pin back.
cscsl22039 user failed authentication with error code 413 after new pin was
entered
cscsi45962 unity vista novsdata replacement for stateful firewall zone install
cscsi26106 unity vista: reason 442: failed to enable virtual adapter
cscsj87763 vista: ping fails to the physical ip address when using local lan
access
cscsj89258 unity windows cli user and invalid password causes prompt hang
cscsi25954 unity vista: certificate authentication via smartcards are not
supported
cscsk52566 unity windows ppp default gateway metric not incremented
cscsa74320 profile files (.pcf) are corrupted if machine hangs
cscsk25287 unity windows dne upgrade again to version 3.21.7
cscsk37470 unity: unable to upgrade from installshield install to msi install

workarounds for vista:

error 412: the remote peer is no longer responding
upgrade local nat device's firmware
if this is not possible, switch to tcp
if this is not possible, use the following keyword in connection profile
(*.pcf):uselegacyikeport=1

caveat: if you are using domain isolation, customer will not be able to use the
uselegacyikeport
keyword as this conflicts with microsoft�s domain isolation.

error 1721 (at install time.)

client does not support 64bit.

to enable the built-in firewall on vista for the vpn client, download the
zonealarm
library package from cco and follow the directions enclosed.

to resolve the bluescreen issue on xp related to the vpn client built-in firewall,
upgrade the libraries on the system with the new files available on cco for
download.
previous release:
release 5.0.03.0530.rel

files:
vpnclient-win-msi-5.0.03.0530-k9.exe - windows 2000, xp and vista only.

contents: - see release notes for release 5.0 at:

http://www.cisco.com/en/us/products/sw/secursw/ps2308/prod_release_not
es_list.html