Thank you for the quick reply.  I failed to mention that we are using Windows 7 64 bit.  What would be the right solution for that OS?

Try using shrewsoft client ( freeshare from shrew.net --- use the lastest version for 64 bit win 7 ). also you use the cisco client for 64 bit beta version.

thanks

manish

Thanks, Manish.  We tried the Shrew VPN client, but could never get it to connect.  Plus, we heard it

was pretty unstable.

We will get the Cisco for 64 bit beta client and see how that works.

Rolf ! i have been using Shrewsoft on 64 bit vista ( vista can you believe it .. ) , it works like a champ. anyways , if you are using pre-shared with x-auth i can explain how you can use it.

1> place ip address of the vpn server or fqdn on the vpn site configuration tab.

2> go into authentication tab :-

   a> set auth method to mutual psk + x-auth.

   b> local identity -- key identifier --- place your tunnel group name here.

   c> remote identity -- ip address

   d> credential -- tunnel group password.

3> check the phase two tab for proper DH group ( default is group 2 ).

or easier , just import the cisco client pcf file into the shrewsoft client.

hope it helps

manish

Manish, it seems when we tried the Shrew VPN, we were able to import the Cisco pcf file, but the connection hung up somhow on Phase Two.  The client indicated it was connected, but no traffic would pass successfully, even a ping.  I will go ahead and try it again, or look into the Cisco beta release.

Thanks for your help, and stay tuned...

i have previously seen issues with windows 7 clients when 3 des is used, i also read on some forums that on win 7 3 des in not enabled by default

just to rule out that option, could you please try configuring aes in phase 1 and phase 2 policies and give them highest priority