VPN Client Support

Anonymous
2012-10-30T23:35:39+00:00

The info page for the new Samsung RT tablet - the ATIV tab - says:

Enterprise Solutions (upon request): Exchange ActiveSync, On-Device Encryption, Cisco VPN (Virtual Private Network), Juniper Junos Pulse VPN, EAS

But the Junos Pulse client is not in the Windows Store - so either Samsung has some exclusive deal with Juniper, or this is a "coming soon" feature.

I'd like an answer. As much as I love the Surface hardware, if I cannot get the last piece of the puzzle I need for work, the Pulse client, and it is available on another vendor's tablet, I'll need to think about switching.

I would really like an answer from Microsoft on this one.

And to re-confirm - the ATIV is a Windows 8 RT tablet, NOT a Windows 8 Pro tablet.

Surface | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

189 answers

Sort by: Most helpful
  1. Anonymous
    2013-05-17T15:52:11+00:00

    FWIW, I am not an IT person, so I concede my knowledge is limited.  (I just know enough to be dangerous.)  :)

    Regarding minimal security, are you sure about that?  http://kb.juniper.net/InfoCenter/index?page=content&id=KB25334

    Also if it is true, isn't this still a Juniper or Cisco issue?  Seems to me they should allow for IKEv2 connections without having to compromise the security of the appliance.  Seriously, what's the point of offering the functionality if it's too risky to actually turn it on?

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2013-05-17T15:34:23+00:00

    The info about Juniper supporting RT is only if the SSL appliance is configured to use minimal security with no protections. In this case, you can use the manual "create a connection" option on the Surface RT control panel, but most, if not all, IT departments would never use this, as it is the least secure and most "hackable".

    Same applies for Cisco (and many others)...

    It's like buying a car with airbags but having to disable them to drive the car somewhere. That's why IT departments have not solved this issue for us yet.

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2013-05-17T15:20:31+00:00

    Just food for thought here. I don't think Juniper and Cisco should be let off the hook for Microsoft not providing APIs. Don't get me wrong, I think not providing APIs is a colosal mistake on MS's part, but Cisco and Juniper still own responsibility. So does IT.

    We use a Juniper SA Secure Access SSL VPN appliance where I work. According to this document, Juniper SA should support WinRT if the appliance is simply configured to do so. My IT department has flat out admitted that the VPN appliance should support IKEv2, but they won't make the necessary configuration to allow it to happen.

    http://www.juniper.net/us/en/local/pdf/datasheets/1000220-en.pdf

    This is supported further by this link (which has already been shared on this thread)

    http://technet.microsoft.com/en-us/library/jj900206.aspx

    When it comes to Juniper or Cisco, I think they could deliver an app, to be delivered through the app store, that would provide limited support and functionality. This is a concept, so I might not have all of the technical details right. :) As I understand it, all apps delivered from the app store are sandboxed from each other. This prevents any SSL (or other connections) from being used system wide. Ok, Juniper, let's just work with that then:

    Create an app that provides your SSL connection to your network appliances that contains the following BUILT-IN functionality.

    * RDP client

    * File browser that can see/copy remote and local file systems.

    * Web browser to access internal web-based resources.

    This would probably satisfy the needs of most people that want VPN, and it could all be contained within a single app.

    PS - I'm also wondering if this will be addressed with the 8.1 update coming later this year.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2013-05-17T14:31:07+00:00

    It is quite possible that the APIs are the issue and deliberately left out of the SDK for development.

    Marketing of the RT has been a disaster.  A lot of people didn't know that it will not run regular Windows software/drivers and found out the hard way after buying them.  They describe what it is as an "end item" and a throw off is that it has "Windows 8" as part of the name of them.  That has caused confusion.  Sales clerks in some stores other than Microsoft Stores didn't receive any training on them either and didn't know the difference.

    I would say to just keep hammering away with this thread.  Microsoft "CAN" do something about it.  As to whether these things have a future will be the question.  Personally, I like it in a simple fashion and it has everything I would need for basic use.  You are restricted from loading regular software which is a drawback for using them in a business environment.

    Like you said, keep reading, keep posting.  Eventually something may happen.  Those drivers needed for VPN clients can be re-compiled for the ARM processor.

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2013-05-17T13:30:26+00:00

    I feel this is a bad decision by Microsoft.

    Why can Apple / Redhat etc.. get away with implementing the cisco ipsec client in the OS ?

    MS never bothered doing it with windows XP / Vista / 7 and now 8.  At least with the non ARM OS's you can install the Cisco Client.  It would be a great addition to Windows RT.

    Was this answer helpful?

    0 comments No comments