Cisco VPN client Windows 7 frequently disconnecting

Posted on 2013-01-09
Medium Priority
1 Endorsement
Last Modified: 2013-02-04
VPN Client is disconnecting frequently....  It happens on average every 10-30 min or so.....

VPN Client error message "Secure VPN Connection terminated locally by the Client.
Reason 412: The remoe peer is no longer responding"

Windows 7-32 and Windows XP bit using
Windows 7-64 bit using vpnclient-winx64-msi-

Question by:Mike
LVL 12

Accepted Solution

Gary Dewrell earned 240 total points
ID: 38760780
Try the following:
On the drive where the Cisco VPN client is installed, choose Program Files > Cisco Systems > VPN Client > Profiles.

Right-click the profile, and choose Open With, Choose notepad. Make sure you uncheck the box that says Always use this program to open these files.

Locate the profile parameter for ForcekeepAlives, and change the value from 0 to 1, then save the profile.
Hope it helps.

Assisted Solution

KC2TC earned 240 total points
ID: 38760965
•If you are using wireless, try to connect with cable
•Turn your firewall off, then test the connection to see whether the problem still occurs. If it doesn’t then you can turn your firewall back on, add exception rules for port 500, port 4500 and the ESP protocol in your firewall
•Turn on NAT-T/TCP in your profile ( remember to unblock port 10000 in your firewall)
•Edit your profile with your editor and change ForceKeepAlive=0 to 1
LVL 14

Assisted Solution

BlueCompute earned 480 total points
ID: 38761415
You could try using the Shrewnet VPN client.  It's free and works with Cisco.
WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

LVL 18

Assisted Solution

max_the_king earned 240 total points
ID: 38762350
it seems to be the same old story ...

please have a look at the following:

hope this helps

Author Comment

ID: 38763083
Just to give little more details... We were using Checkpoint VPN, moving toward ASA. Checkpoint was working good and were no complain. However this ASA is used by many including myself but I have windows XP and some do have Windows 7. I had not problem, that tells me it may be the compatiblity with 7 and Cisco VPN client. Cisco saying (32 bit) and vpnclient-winx64-msi- will work for Windows 7. It works but dropping a lot.  since users had no prblem with checkpoint, I don't see a client site connection issue (ISP/modem/cable/wireless etc...).  Is there somthing we need to modify in Windows 7 or Cisco VPN client to keep it going. I tried chaning he peer timeout from default 90s to 480s too, didn't help on Windows 7.

Author Comment

ID: 38788762
Why we need "Citrix DNE updates" for installting CISCO VPN on Windows 7? what does this Citrix DNE updates does? Anyone knows.


1.Uninstall any previous version of Cisco VPN client that you may have installed
3.Download the Citrix DNE Update and install it.
5.Make sure you have Cisco VPN Client (or newer, if available)
6.Install the Cisco VPN Client
LVL 14

Assisted Solution

BlueCompute earned 480 total points
ID: 38790023
I don't think this is a general problem with the Cisco VPN client on Windows 7, as I have used it for several years on win7x64 and 32 bit.  Thousands of people use the client on windows 7 (hundreds of thousands?) with nil problemo.

The article you reference is over 3 years old.

What is your VPN configuration?

Author Closing Comment

ID: 38852280
Not sure exactly what is the problem but
(these are some of the solutions that worked and not worked for me)
- I have unintall and re-installed it worked for one user.
- One user couldn't access file shares after making VPN connection, I had to switch to "IPsec over TCP TCP Port 10000" instead of "IPSec over UDP (NAT/PAT) for "Enable Transparent Tunneling" under "Trasport" (Although UDP works for all others.)
- For one I have to change peer response timeout to 480s
- For one user I had to change  ForcekeepAlives to 1
- Everyone is different when it comes to Windows 7 32bit or 64bit. For XP no issue at all.
For about 10 more users, I am still working on figure-out a solution.

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
Read this tutorial to learn how to fix repeating password error prompts when setting up Gmail IMAP with Microsoft Outlook. The entire process is described with step by step, illustrated instructions. Enjoy...
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question