Table of Contents
Advertisement
Chapter 1
Understanding the VPN Client
Table 1-2
Program Feature
Connect on open
VPN Client API
Authentication Features
The VPN Client supports the authentication features listed in
Table 1-3
Authentication Feature
User authentication through
VPN central-site device
Certificate Management
Certificate Authorities (CAs)
Peer Certificate Distinguished
Name Verification
IPSec Features
The VPN Client supports the IPSec features listed in
Table 1-4
IPSec Feature
Tunnel Protocol
Transparent tunneling
Key Management protocol
IKE Keepalives
OL-5490-01
Program Features (continued)
Description
This feature lets a user connect to the default user profile when starting
the VPN Client. You can enable this feature on the Preferences menu
under the VPN Client tab.
VPN Client provides an application programming interface for
performing VPN Client tasks without using the command-line or
graphical interfaces that Cisco provides. This API comes with a user
guide for programmers, which is in a format that can be edited.
Authentication Features
Description
•
•
•
•
Allows you to manage the certificates in the certificate stores.
CAs that support PKI SCEP enrollment.
Prevents a VPN Client from connecting to an invalid gateway by
using a stolen but valid certificate and a hijacked IP address. If the
attempt to verify the domain name of the peer certificate fails, the
VPN Client connection also fails.
IPSec Features
Description
IPSec
•
•
Internet Key Exchange (IKE)
A tool for monitoring the continued presence of a peer and report
the VPN Client's continued presence to the peer. This lets the VPN
Client notify you when the peer is no longer present. Another type
of keepalives keeps NAT ports alive.
Table
Internal through the VPN device's database
RADIUS (Remote Authentication Dial-In User Service)
NT Domain (Windows NT)
RSA (formerly SDI) SecurID or SoftID
Table 1-4
IPSec over UDP for NAT and PAT
IPSec over TCP for NAT and PAT
VPN Client User Guide for Mac OS X
VPN Client Features
1-3.
1-5
Advertisement
Table of Contents
