I’ve been using Cisco’s VPN client for OS X for the last week or so, and authenticating with a SecurID.
It doesn’t suck. In fact, it works really well.
I was in a bit of a bind. The Cisco VPN clients were crap and it was getting rough to build the SA with my remote gateway for work. Turns out part of the problem was that I was using RFC-1918 space that my remote end ALSO used, but inside my house.
Eventually we got that ironed out, and I got my new SecurID token and I setup the VPN client. It was very straight forward, and I followed the instructions for the Windows client to the letter for the most part, and I’m sure anyone could.
As I use NAT inside my house to go to my internet connection, I was pleased to see that Cisco supports VPN over UDP to work through a NAT. This was a big improvement over how it used to work, when I had to unhook my firewall and plug a laptop directly into the TA and get connected that way.
This is much better.
And it performs too. I’m currently copying nearly a gigabyte of data over the VPN and my CPU (667MHz G4) is 30% idle. This is with a large amount of applications running.
Kudos to Cisco for getting me a useable VPN client with a minimum of setup required to make it work. I was getting really bored with constant tweaks and configuration done to the old one!
The only issues I have encountered so far is with shared networks, where I can still access my internal hosts – one of my profiles forbids it, but the other should allow it, and it seems very hit or miss. Disconnecting and reestablishing the connection seems to make it go away most of the time. In the meantime, I can reach my office fileservers and mail servers now.