1. Cyberoam VPN Client Version 4.70 build 001
IPSec VPN Client Version: 4.70 Build 001
Release Notes Date: July, 2010
Contents
Introduction .................................................................................................................... 2
Download Client ........................................................................................................................... 2
Operating Systems supported...................................................................................................... 2
Features .......................................................................................................................... 2
Enhancements ................................................................................................................ 2
Bugs Solved.................................................................................................................... 2
Copyright © 2010 Elitecore Technologies Ltd. All rights reserved. Document version – 1.0-20100728

2. Cyberoam VPN Client Version 4.70 build 001
Introduction
This document contains the release notes for Cyberoam IPSec VPN Client version 4.70 build 001.
Document includes all the features, improvement, and bug fixes from the release 4.70 build 001.
Download Client
http://www.cyberoam.com/downloads/vpnclient/CyberoamVPNClient_Setup_470001.exe
Operating Systems supported
Windows 2000 (Workstation), WinXP 32-bit (all service packs including SP2), Windows Server
2003 32-bit, Windows Server 2008 32/64-bit, Windows Vista 32/64-bit, Windows 7 32/64-bit
Features
 Support 2 new languages - Czech and Danish for total of 21 languages. Czech and Danish
now embedded in the software setup.
 Support of new WWAN driver model for 3G/4G devices on Windows 7 (Windows Seven
32/64bit). All 3G/4G wireless modem/adapter manufactures must support “Mobile Broadband
Driver Model Specification” for Windows 7 based on NDIS6.20 miniport driver model. Among
those adapters, we now support Atheros Wireless Adapter, Dell Wireless 5530 HSDPA Mini-
Card, Dell Wireless 5600 EVDO-HSPA Mini-Card, Huawei 3G modem, Qualcomm Gobi
2000, Sierra wireless MC8781 HSPDA. See our list of 3G modem/adapters.
 Latest NetGear VPN Routers Mode-Config support.
 Windows firewall rules auto setup extended to 'public' and 'domain' profiles.
 Ability to upgrade a group of license numbers at a specific date (with different expiration
dates). This is useful to large customers/resellers to simplify their accounting/reporting of
maintenance option.
 Configuration file now encrypted during software upgrade. Password set for GUI access or
command line can be used.
Enhancements
 Ability to copy&paste the license number from the 'About..' windows.
 Change in user interface of the Phase2 panel around the “Certificates Management..” button.
 Temporary installation folder for drivers in Windows 7 64-bit shall not have restricted access
rights.
 RFC defines port 4500 UDP for key renegotiation. Port 500 is allowed now.
 Mode-Config in IKE Engine has been adapted for compatibility with NetGear gateways.
 Added Push mode in Mode-Config for compatibility with NetGear gateway.
 Command line /pwd switch is mandatory for /export and /exportonce requires (e.g.
vpnconf.exe /export:c:test.tgb /pwd:test).
Bugs Solved
 Command line to replace a configuration file protected with password (e.g.
/replace:c:test.tgb /pwd:test) might erase current configuration if wrong password.
Copyright © 2010 Elitecore Technologies Ltd. All rights reserved. Document version – 1.0-20100728

3. Cyberoam VPN Client Version 4.70 build 001
Command lines to /add or /importonce are not affected.
 Command lines ("vpnconf.exe /import:[filename]") might not be executed properly.
 Events not logged in ‘Console’ when opening/closing tunnel before Windows logon (for Gina
mode go to ‘Phase2 Advanced’ > ‘Enable before Windows logon’)
 Software activation may not work properly in case Windows default temporary folder is
restricted to the user.
 Leaving sleep mode in Windows 7 64-bit might lead to Bluescreen.
 Special characters in Phase1 or Phase2 names could crash when software starts.
 Popup shows continuously "Remaining tunnel" after tunnel closed, due to erroneous cookie
in ‘INVALID COOKIE’ notification message (i.e. RFC2522)
 Limitation in length of all parameters to avoid buffer overflow.
 ‘Open Tunnel’ button disabled while network interfaces become available or unavailable to
avoid crash. Especially wireless network interfaces (e.g. 3G, WiFi,..).
 IKE service might crash if user open and close the tunnel multiple times rapidly while a
redundant gateway as been set.
 Support for numerical OID in certificate subject may lead to inability to open tunnel.
 Sound (‘Ding’) when using ‘Tab’ keyboard key in X-Auth Authentication popup.
 Password limiting access to some features (‘View’ > ‘Configuration’) might be asked even
when not set.
 "Don't start VPN Client when I start Windows" is not working on Windows 7 64-bit. The IPSec
VPN Client always starts.
 Bluescreen on Sony VAIO VGN-FW51MF with 3G option, Windows Seven 64-bit (Win 7) and
a VPN Configuration using Certificates.
 When local and remote network are on the same subnet, access to remote network would
not work properly if the ‘Auto open tunnel on traffic detection’ feature has not been selected.
 Bad version IKE daemon.
Copyright © 2010 Elitecore Technologies Ltd. All rights reserved. Document version – 1.0-20100728