I have a couple of customers who still use the old discontinued/obsolete IPSEC based Cisco VPN client.

Obviously it is not a good idea to use software that is no longer supported, but that aside: what are the known risks with this client app, the hardware backing it, and the tunnel tech itself? I have been looking for CVEs, but haven't found anything 'interesting' yet.

I have recommended that they upgrade to something more modern (and supported), but I would like to have concrete examples of what problems and risks are associated with it, and be able to provide my customers with some real reasons why they should upgrade to use e.g. AnyConnect instead of the old vpn client.

up vote 3 down vote accepted
+300

It is hard to tell what problems a specific unsupported software will cause in detail. But, if you look at the list of past CVE for this product you'll see regular problems and even problems reported after the product was already end of life. This can be used as a base to extrapolate what kind of problems might still be lurking in the software.

  • Thanks, this is what I am thinking too. However, my dilemma is: how do I convince them that it is time to replace this old/unsupported tech with something new/supported/maintained? Maybe this is just a shortcoming in my communication skills, but maybe someone else has been through this already? – KristoferA Sep 21 '17 at 11:13
  • 2
    @KristoferA Run through some compromise scenarios based on the previous vulnerabilities, the implication being there is evidence to suggest these could recur in the future. – R15 Sep 22 '17 at 6:41
  • The several hours wasted into troubleshooting a connection error after a software/appliance update or when trying to join a new node to a network might be able to help convince them. – DarkLighting Sep 28 '17 at 18:21

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.