VPN Client Compatibility with Windows 7 and Windows Server 2008 R2

Updated: July 27, 2011

Applies To: Windows 7, Windows Server 2008 R2

When you upgrade your computer from an older version of Windows to Windows® 7 or Windows Server® 2008 R2, your 3rd-party virtual private network (VPN) client programs might not work. As Windows evolves, sometimes changes to the underlying infrastructure are required to implement new features, and these changes can sometime break compatibility with older programs. While Microsoft makes every effort to maintain compatibility with older programs, there are some categories of programs that are more likely to be impacted by these changes. VPN clients are one of them.

The tables below show the VPN clients available from different vendors. The tables include the minimum version number that has been tested and known to be compatible with Windows 7 and a link to the vendor’s Web site where you can download the client.

Be sure to review the More information column for any important notes that might be relevant to your use of the client.

Note

This article is for information purposes only. The third-party products mentioned in this article are developed and manufactured by companies that are independent of Microsoft (“third-party vendors”). Information about these products and the contact for technical support are provided by the third-party vendors and may change without notice. Microsoft makes no warranties, express, implied or statutory, as to the performance or reliability of these products, or the information in this document.

  • AT&T

  • Checkpoint

  • CISCO

  • Citrix

  • F5

  • Juniper

  • NCP

  • NetGear

  • Nortel

  • SafeNet

  • Sonic Wall

AT&T

VPN client Release Platform Version Download URL More information Tested on Windows 7 build

IPsec VPN

Final

x86, x64

V7.6.2

https://www.attnetclient.com/v7/download.php

7000

Checkpoint

VPN client Release Platform Version Download URL More information

IPsec VPN

Final

x86

NGX_R60_HFA2

Expected availability: April 2007

https://updates.checkpoint.com/fileserver/ID/7951/FILE/SC_NGX_R60_HFA2_630000044.msi

Clean installation working with limited testing.

SSL VPN

Final

x86, x64

SNX R66 HFA 01

Expected availability: June 2009

https://supportcenter.checkpoint.com/supportcenter/portal/user/anon/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=8726

SSL Network Extender: Clean installation working with limited testing. Upgrade scenario has been flagged for upgrade block.

https://www.checkpoint.com/products/ssl_network_ext/index.html

Endpoint Connect

Final

x86

NGX R66

Expected availability: June 2009

https://supportcenter.checkpoint.com/supportcenter/portal/user/anon/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=8729

Clean installation working with limited testing.

Endpoint Connect

Final

x64

NGX R66

Expected availability: June 2009

https://www.checkpoint.com/downloads/quicklinks/downloads_sr.html

Clean installation working with limited testing.

CISCO

VPN Client Release Platform Version Download URL More information Tested on Windows 7 Build

Cisco AnyConnect VPN Client (SSL VPN)

2.3.x

x86

2.3.x

https://www.cisco.com/cisco/software/navigator.html

You must have a Cisco.com user account to download.

7048

Cisco AnyConnect VPN Client (SSL VPN)

2.3.x

x64

2.3.x

https://www.cisco.com/cisco/software/navigator.html

You must have a Cisco.com user account to download.

7048

Cisco VPN Client (IPsec)

Final

X86

5.0.5+

https://www.cisco.com/cisco/software/navigator.html

Cisco VPN Client (IPsec)

5.0.5+

x64

5.0.5+

https://www.cisco.com/cisco/software/navigator.html

No official support for this version planned by Cisco. Use the Cisco AnyConnect VPN Client for both Windows 7 and x64 support

7048

Citrix

Citrix Access Gateway versions identified in the following table are officially supported on Windows 7.

VPN client

Release

Platform

Version

Date

Download URL

More information

SSL VPN

Final

x86

Access Gateway Standard Edition 4.6.1

Expected in Q4 2009

Not yet available

In development

SSL VPN

Final

x64

Access Gateway Standard Edition 4.6.1

Expected in Q4 2009

Not yet available

In development

SSL VPN

Final

x86

Access Gateway Advanced Edition 4.5 HF5

Expected in Q1 2010

Not yet available

In development

SSL VPN

Final

x64

Access Gateway Advanced Edition 4.5 HF5

Expected in Q1 2010

Not yet available

In development

SSL VPN

Final

X86

Access Gateway Enterprise Edition 9.1

Expected in Q4 2009

Not yet available

In development

SSL VPN

Final

x64

Access Gateway Enterprise Edition 9.1

Expected in Q4 2009

Not yet available

In development

The versions identified in the following table are officially supported on Windows Vista only, but do not have any known issues when run on Windows 7.

VPN client Release Platform Version Date Download URL More information Tested on Windows 7 build

SSL VPN

Final

x86

Access Gateway Standard Edition 4.5.8

Available now

https://www.citrix.com/site/SS/downloads/results.asp?productID=15005

VPN client must be re-installed after upgrading from Vista

7000

SSL VPN

Final

x64

Access Gateway Standard Edition

Planned

Not yet available

In development

SSL VPN

Final

x86

Access Gateway Advanced Edition 4.5 HF4

Available now

https://www.citrix.com/site/SS/downloads/results.asp?productID=15005

VPN client must be re-installed after upgrading from Vista

7000

SSL VPN

Final

x64

Access Gateway Advanced Edition

Planned

Not yet available

In development

SSL VPN

Final

X86

Access Gateway Enterprise Edition 9.0

Available now

https://www.citrix.com/site/SS/downloads/results.asp?productID=15005

Requires server build 9.0.68 or later.

7000

SSL VPN

Final

x64

Access Gateway Enterprise Edition

Planned

Not yet available

In development

F5

VPN client Release Platform Version   Download URL More information Tested on Windows 7 build

SSLVPN

Build Stage

x86

Post v.6.03

Expected availability: Q3 2009

https://Tech.f5.com

7000

SSLVPN

Build Stage

x64

Post v.6.03

Expected availability: Q3 2009

https://Tech.f5.com

7000

Juniper

VPN client Release Platform Version Download URL More information Tested on Windows 7 build

IPSec VPN

Final

x86

6.5R1 or 6.5Rx

Expected availability: Q3 2009

https://www.juniper.net/customers/csc/software/ive/

You must have a Juniper.net customer or partner user account.

Contact a Juniper sales representative.

7000

SSL VPN

Final

x86

Not shared

Expected availability: Q3 2009

https://www.juniper.net/customers/csc/software/ive/

You must have a Juniper.net customer or partner user account.

Working with limited testing. Juniper’s QA has reported that there are no issues seen, both with upgrade and new install scenarios.

For more information:

https://www.juniper.net/products_and_services/ssl_vpn_secure_access/

7000

Final

X64

Not yet available

Contact a Juniper sales representative.

NCP

VPN client Release Platform Version Download URL More information Tested on Windows 7 build

 IPsec VPN

Beta

x86

9.12

 Contact NCP or an NCP dealer representative.

7000

 IPsec VPN

Beta

x64

9.12

 Contact NCP or an NCP dealer representative.

7000

 SSL VPN

Beta

x86

8

Expected availability: April 2009

 Contact NCP or an NCP dealer representative.

7000

 SSL VPN

Beta

x64

8

Expected availability: April 2009

 Contact NCP or an NCP dealer representative.

7000

NetGear

NetGear’s native VPN client is not supported on Windows 7. Instead, the following routers have been tested and work with the Windows 7 native VPN client.

VPN client Router Platform Version More information Tested on Windows 7 build

IPSec

FVX538

x86, x64

V3.0.5-23

Expected availability: Sept 2009

https://www.netgear.com/Products/VPNandSSL.aspx

7000

IPSec

FVS338

x86, x64

V3.0.5-23

Expected availability: Sept 2009

https://www.netgear.com/Products/VPNandSSL.aspx

7000

IPSec

DGFV338

x86, x64

V3.0.5-23

Expected availability: Sept 2009

https://www.netgear.com/Products/VPNandSSL.aspx

7000

IPSec

FVS336G

x86, x64

V3.0.5-23

Expected availability: Sept 2009

https://www.netgear.com/Products/VPNandSSL.aspx

7000

IPSec

FVG318

x86, x64

V2.1.3-10

Expected availability: Sept 2009

https://www.netgear.com/Products/VPNandSSL.aspx

7000

IPSec

SRXN3205

x86, x64

V3.0.3-19

Expected availability: Sept 2009

https://www.netgear.com/Products/VPNandSSL.aspx

7000

Nortel

VPN client Release Platform Version Date Download URL More information Tested on Windows 7 build

IPSec VPN

Beta

x86

10.04

March 2010

https://support.nortel.com/go/main.jsp

Only Nortel customers and partners will be able to download the client.

Contact your Nortel Representative

7000

IPSec VPN

beta

x64

10.04

March 2010

https://support.nortel.com/go/main.jsp

Only Nortel customers and partners will be able to download the client.

Contact your Nortel Representative

7000

SSL VPN

Beta

x86

10.04

March 2010

https://support.nortel.com/go/main.jsp

Only Nortel customers and partners will be able to download the client.

Contact your Nortel Representative

7000

SSL VPN

beta

x64

10.04

March 2010

https://support.nortel.com/go/main.jsp

Only Nortel customers and partners will be able to download the client.

Contact a Nortel Representative

7000

SafeNet

The existing SoftRemote version of the SafeNet VPN client is not supported on either 32-bit or 64-bit versions of Windows 7. The IPsec Toolkit version named QuickSec, is supported on Windows 7.

VPN client Release Platform Version Download URL More information Tested on Windows 7 build

IPSec Toolkit

Final

x86, x64

QuickSec

Expected availability: Q4 2009

https://biz.safenet-inc.com/index.asp

https://www.safenet-inc.com/products/vpn/softRemote.asp

7000

Sonic Wall

VPN client Release Platform Version Date Download URL More information Tested on Windows 7 build

IPsec VPN

Final

x86

4.2.6.0305

Beta Available

https://www.mysonicwall.com/Firmware/DownloadCenter.aspx

You must have a mysonicwall.com user account to download.

7000

IPsec VPN

Final

x64

4.2.6.0305

Beta Available

https://www.mysonicwall.com/Firmware/DownloadCenter.aspx

You must have a mysonicwall.com user account to download.

7000

IPsec VPN

Final

x86

4.0.0.830

10/8/2007

https://www.mysonicwall.com/Firmware/DownloadCenter.aspx

You must have a mysonicwall.com user account to download.

Requires reinstall after Windows upgrade. Upgrade advice will be shown to the user for this client version. Clean Installation works.

Issues, Resolutions, and Status

The following table contains a list of issues identified during application compatibility testing with the respective resolution or status.

Client Application Name VPN Vendor Client Application Version Known Issue Solution

Cisco VPN Client

CISCO

5.0.05.0280

Blue screen crash on reboot after installation.

Fixed.

Secure Client

CheckPoint

NGX_R60_HFA2

Upgrade Issue - flag for block.

Not a regression.

An upgrade notice is shown during upgrade because the client uses .NET class drivers which are not migrated during upgrade. Users can uninstall and reinstall after upgrade.

Citrix Access Gateway

Citrix

Citrix access gateway (CAG) client version 4603301

Citrix VPN Client is not giving IP address.

Reported on MS-Connect site for 64-bit version. Though we cannot currently reproduce this, our ISV engagement team is working work with Citrix to investigate the issue.

Citrix has confirmed that their client works on clean installation. Citrix is in the planning/development stage for 64-bit.

Citrix access gateway (CAG) client version 4603301

CAG unable to complete connection setup and hangs while Applying Network Policy

Not a regression.

An upgrade notice is shown during upgrade because the client uses .NET class drivers which are not migrated during upgrade. Users can reinstall (without having to first uninstall) after the upgrade.

Soft Remote

SafeNet

10.8.4 (32-Bit)

Failed to install adapter due to hard version check in the driver.

The VA does not function properly.

Not a regression.

An upgrade notice is shown during upgrade that this client application will not work as the client is supported on Windows Vista only.

SafeNet’s IPsec toolkit called QuickSec is scheduled to support Windows 7 in 2009 Q4.

11.1.2 (32-Bit)

While installing, qsfilter.sys crashes.

11.1.2 (64-Bit)

Fails to install. due to a hard version check.

Global Network Client Managed VPN

AT&T

7.6.0.3005

Network access client does not work.

AT&T working on the fix. Not Windows 7specific issue

SonicWall Global VPN Client

SonicWall

4.0.0

Get an error: Failed to open the IPSec driver

Not a regression.

Users can uninstall and reinstall after upgrade. Clean installation on Windows 7 works fine.

Secure Entry Client

NCP

8, 9.12

Version check issue

Fixed by NCP.