0

I have a couple of customers who still use the old discontinued/obsolete IPSEC based Cisco VPN client.

Obviously it is not a good idea to use software that is no longer supported, but that aside: what are the known risks with this client app, the hardware backing it, and the tunnel tech itself? I have been looking for CVEs, but haven't found anything 'interesting' yet.

I have recommended that they upgrade to something more modern (and supported), but I would like to have concrete examples of what problems and risks are associated with it, and be able to provide my customers with some real reasons why they should upgrade to use e.g. AnyConnect instead of the old vpn client.

Improve this question

1 Answer 1

Reset to default
3
+300

It is hard to tell what problems a specific unsupported software will cause in detail. But, if you look at the list of past CVE for this product you'll see regular problems and even problems reported after the product was already end of life. This can be used as a base to extrapolate what kind of problems might still be lurking in the software.

Improve this answer
3
  • Thanks, this is what I am thinking too. However, my dilemma is: how do I convince them that it is time to replace this old/unsupported tech with something new/supported/maintained? Maybe this is just a shortcoming in my communication skills, but maybe someone else has been through this already?
    – KristoferA
    Sep 21, 2017 at 11:13
  • 2
    @KristoferA Run through some compromise scenarios based on the previous vulnerabilities, the implication being there is evidence to suggest these could recur in the future.
    – R15
    Sep 22, 2017 at 6:41
  • The several hours wasted into troubleshooting a connection error after a software/appliance update or when trying to join a new node to a network might be able to help convince them.
    – DarkLighting
    Sep 28, 2017 at 18:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .