Secure Access to Corporate Network
Easy and secure VPN management with a unequaled user-friendly interface.TheGreenBow
IPSec VPN Client 5.5
Download 
Buy Now! 
IP Encapsulating Security
IP Encapsulating Security: mode tunnel & transport. Multi-tunneling to several VPN Gateways. Allows 'IPSec only' trafic filtering, can block all other connections than the VPN connections. Accepts incoming IPSec Tunnels.
Strong User Authentication
Strong User Authentication provided by:
- PreShared keying
- X-Auth
- USB Token and SmartCard
- X509 Certificates. Flexible Certificate format (PEM, PKCS12, ...) on various media (USB, smartcard, tokens)
- Hybrid mode is a specific authentication method used within IKE. Phase 1. This method assume an asymmetry between the authenticating entities.
- Keying group: Support of Diffie-Hellman Group1, 2, 5 and 14 (i.e. 1536 and 2048)
Connection Mode
All connections types such as Dial up, DSL, Cable, GSM/GPRS and WiFi are supported. Several connection modes:
- IPSec VPN Client to Gateway Mode
allows remote users and business partners or subcontractors to securely connect to the corporate network, with strong authentication solution. - Peer to Peer Mode
can be used to securely connect branch office servers to the corporate information system. - Redundant gateway
can offer to remote users a highly reliable secure connection to the corporate network. Redundant gateway feature allows TheGreenBow IPSec VPN Client to open an IPSec tunnel with an redundant gateway in case the primary gateway is down or not responding.
USB token and SmartCard
USB token and SmartCard add another layer of security on top of IPSec:
- VPN configurations and security elements (certificates, preshared key,…) can be saved into an USB Stick in order to remove authentication information from the computer.
- TheGreenBow IPSec VPN Client can read Certificates from SmartCards to make full use of existing corporate ID card or employee cards that may carry Digital credentials.
VPN Configuration Wizard
The VPN configuration Wizard allows the creation of VPN configurations in three easy steps. It is designed for remote computers that need to get connected to a corporate LAN through a VPN gateway.
Look at IPSec VPN Client Wizard screenshot.Step 1: Choice of the remote equipment.Step 2: VPN Tunnel Parameters.Step 3: Configuration Summary.
Localization
The localization of the IPSec VPN Client is fully customisable, even by a third party. To know how to produce a new localization, see our localization page.
Windows versions
All Windows versions supported: WinXP 32-bit, Windows Server 2003 32-bit, Windows Server 2008 32/64-bit, Windows Vista 32/64-bit, Windows 7 32/64-bit, Windows 8 32/64-bit(More info ..).
Remote Desktop Sharing
Multiple Remote Desktop Sharing sessions may be configured in the 'Remote Sharing' tab. This feature enables a user to share his machine on the corporate network from a remote location like home. When the user click on one of the Remote Desktop Sharing session, the associated VPN tunnel automatically opened, and an Remote Desktop Protocol session is launched to reached the remote machine.
NAT-Traversal
NAT-Traversal support of Draft 1 (enhanced), Draft 2, Draft 3 and RFC 3947 (full implementation), IP address emulation, including:
- NAT_OA support (floating port for IKE exchange)
- NAT keepalive
- NAT-T in aggressive mode
- Forced NAT-T
NAT-Traversal may be forced from the IPSec VPN Client. This functionnality is especially useful to solve issues with intermediate NAT boxes.
Strong encryption
Strong IPSec encryption provided by:
- DES, 3DES 192 bit
- AES 128, 192, 256 bit
- RSA 2048
Mode-Config
"Mode-Config" is an Internet Key Exchange (IKE) extension that enables the IPSec VPN gateway to provide LAN configuration to the remote user's machine (i.e. IPSec VPN Client). Once the tunnel is opened with "Mode Config", the end-user is able to address all servers on the remote network by using their network name (e.g. //myserver/marketing/budget) instead of their IP Address.
IP Range
IP Range is a new feature that enables TheGreenBow IPSec VPN Client to establish a tunnel only within a range of predefined IP addresses
Multi vendor
Multi vendor strategy allows us to support as many IPSec VPN Gateways and Routers on the market
as possible to offer a true multi-vendor solution to enterprises. TheGreenBow has certified several IPSec VPN gateways like Bewan, Cisco, Linksys, Netgear, Netscreen, SonicWall, Symantec, Zyxel andLinux appliances that support Strong S/WAN or Free S/WAN.
Please also check our Certified VPN Gateway/Routeur complete list. If you are experiencing testing errors or stagging errors, compatibility issues or configuration problems in a multi gateways/routers environment then you want to try TheGreenBow IPSec VPN Client.
Vista Credential Providers
Vista Credential Providers (aka GINA on W2K/WXP) support to enable Windows logon via VPN tunnel or choose to logon on local machine.
Flexible software deployment
Flexible software deployment means software, configuration, policy and updates can be deployed whenever and wherever they are needed while maintaining low TCO for your organisation. TheGreenBow software provides the best combination of strong IPSec security and "lightweight" IPSec Clients that can be web-deployed to simplify IPSec based network-layer access. TheGreenBow IPSec VPN Client has a tiny software footprint without compromising any security features.
Silent Install and Hidden Interface
Silent install and invisible graphical interface allow IT managers to deploy solutions while preventing users from misusing configurations. For more details about silent install, see our Deployment User Guide.
Secured import and export functions
To allow IT Managers to deploy VPN Configurations securely, import and export functions are available both through the GUI or through direct command line options. These import and export functions may be protected with a password in order to ensure the protection of the VPN Configuration diffusion.
