Welcome to the TheGreenBow IPSec VPN Client Download Center.
This center contains free evaluation software, latest patches, updates and documentations.
Easier with systray popup when tunnels open or close
More USB Tokens and VPN Gateways
Release 4.10 build 010 (Feb. 2008)
Bug fixing: Silent activation is unexpectedly launched when a tunnel is opened.
Bug fixing: Drivers crashes in certain circumstances.
Release 4.10 build 009 (Jan. 2008)
Feature: Support of new tokens Alladin eToken JC1.0b, M4.20, M4.20b, T1 16K, T1 32K. See our Supported Tokens list.
Feature: Support Path MTU discovery. Allow to negotiate MTU size with the network (if supported) to optimize traffic.
Improvement: Path containing spaces can now be specified in Phase2 "Scripts" window (as long as they are enclosed in double-quotes).
Bug fixing: The “Block non ciphered connection” feature is now always imported during Import VPN Configuration.
Bug fixing: IKE module crash (Vista only).
Bug fixing: Manual Activation may fail depending on user rights (Vista only).
Bug fixing: Tunnels with Certificates may fail to open in some circumstances (Vista only).
Release 4.10 build 007 (Oct. 2007)
Features: Setup extraction with “/extract:[Vista|XP]” command line parameter. Especially necessary for silent install.
Features: Support of RFC 3947 (NAT-T).
Improvement: New driver release improves stability (Vista only).
Improvement: Better handling of access rights resulting in a quicker start of the IPSec VPN Client.
Improvement: Command line parameters not working in some circumstances (Vista only).
Bug fixing : Configuration is correctly imported from wizard (Vista only).
Bug fixing: Missing registry Key ObjectName under Windows 2000.
Bug fixing: IPSec VPN Client not started under Windows 2000.
Bug fixing: TgbIke Starter service description added for Windows Service Manager.
Bug fixing: The VPN Configuration is correctly kept during an upgrade (Vista only).
Bug fixing: The command line options of the software are correctly managed (Vista only).
Bug fixing: Import and export functions open the correct user folder rather than the system folder (Vista only).
Release 4.10 build 001 (Aug. 2007)
Feature: TheGreenBow IPSec VPN Client 4.1 is Vista compatible (32 bits only).
Feature: Standard Vista User (non powered) can use TheGreenBow IPSec VPN Client.
Feature: A new systray popup window appears when a tunnel is opening or closing. This systray popup window shows the tunnel opening progress, and the warnings on tunnel opening errors.
Feature: A whole VPN Configuration can be added to the current VPN Configuration, via either a drag & drop operation, the Import File menu within the Configuration Panel or via a new command line (option "/add"). This is an easy way to merge VPN Configuration.
Feature: Tunnels can be imported and exported separately. This feature enables to configure several tunnels (Phase1/Phase2) in a single VPN Configuration, then to export (and deploy) each tunnel separately to the relevant users or user groups. This is an easy way to split VPN Configuration.
Feature: A tunnel can be opened and closed through new command lines (option "/open", "/close").
Feature: A new item in the contextual menu associated with the "Configuration" item of the Configuration Panel tree enables to clear the VPN Configuration
Feature: Optional management of ASN1 teletext description of the Certificate subjects.
Improvement: The VPN Console is simplified with a unique log level to make easier VPN connection error debugging.
Improvement: Automatically disable Microsoft "IKE and AuthIP IPSec Keying Modules" service during software installation.
Improvement: The Redundant Gateway allows now to switch back and forth between gateway and redundant gateway as long as there is one available.
Feature: ActivCard ActivKey SIM USB Token is supported. See our Supported Tokens page.
Feature: eToken Pro smartcard is supported. See our Supported Tokens page.
Feature: iKey 1000 USB Token is supported. See our Supported Tokens page.
Feature: ASN1 certificate description.
Feature: Scripts can be run when a tunnel just opened, before it is closed and after it is closed.
Improvement: Script commands on opening or closing tunnels now accept parameters.
Improvement: The license number remains during a software upgrade.
Improvement: The Hotkeys are modified in Ctrl+Enter (switch back and forth between the Configuration Panel and the Connection Panel), Ctrl+S (Save and Apply) and Ctrl+D (Open the Console Window).
Improvement: Fragmented IP packets management.
Improvement: The log files use a system hour and date for timestamping.
Improvement: The Phase 2 tree icon in the Configuration Panel shows whether the tunnel will open on traffic detection or not.
Bug fixing: Crash on X-Auth popup in some circumstances.
Bug fixing: During an upgrade, the product version is correctly managed and the VPN Configuration is automatically backuped.
Bug fixing: DNS and WINS server addresses are restored on hibernate.
Bug fixing: No IKE crash due to change of IP address.
Bug fixing: IKE "floating point" crash due to log dump.
Bug fixing: BSOD with Intel Wireless 3945 chipsets in some Configurations.
Bug fixing: GUI crashed in some circumstances when closing tunnel.
Release 4.00 build 006 (Jan. 2007)
Feature: A new Connection Panel makes the GUI even easier for users.
Switches between the Configuration Panel and the Connection Panel is
easy as the shortcut key "Ctrl+P", but can be easily restricted by IT
managers (the users are only allowed to use the Connection Panel, in
order to avoid misusing of the software).
The Connection Panel shows in real-time a tunnel while it opens. It
even identifies the IKE/IPSec steps with a "fragmented" progress bar.
Most of all, the Connection Panel implements a popup help for troubles,
which dramatically improves the accuracy of diagnostic!
Feature: A tunnel can be opened via a double-click on a VPN configuration (e.g. shortcut icon on the desktop), aka "Dial-up mode".
Feature: VPN configuration file drag and drop onto the Configuration Panel or Connection Panel automatically imports the configuration and enables it.
Feature: Scripts or applications can be configured before and after opening or closing a tunnel.
Feature: The Configuration Panel may be protected with password, to avoid misused of VPN configuration by end-users.
Feature: IT Managers can pre-configure the access control to the Configuration Panel via a new set of Setup Options.
Feature: Shortcut keys to access main features (Save&Apply, Console, toggle Configuration/Connection Panel).
Feature: Certificates can be imported from several media: USB Stick, SmartCards, Tokens.
Feature: Import of PKCS#12 Certificates from Configuration Panel. This feature obsoletes the use of the conversion tool from PKCS#12 to PEM format.
Feature: The 'Import Certificates...' window now displays the subjects of the imported Certificates, even if they are on a Token (e.g. Smart Card).
Feature: Certificate subject is automatically selected for 'Local ID' in Phase 1.
Feature: Support of Aladdin tokens (i-e: new ATR supported).
Feature: The Activation process is documented with online help for better Activation troubleshooting. Manual activation is still available.
Feature: The Hybrid-Mode is fully supported (RFC: draft-ietf-ipsec-isakmp-hybrid-auth-05.txt).
Feature: The Config-Mode is fully supported.
Improvement: Better usability in the 'Import certificates...' window.
Improvement: Messages are displayed in default language (i.e. english) if not available in the language dll, this is especially useful when our partners work on localization version.
Improvement: Better management of the Console Window, for background/foreground display.
Improvement: More Kaspersky product release supported.
Bug fixing: Compatibility of X-Auth parameters with old IPSec VPN Client software release.
Bug fixing: DNS IP server not always removed when closing a tunnel.
Bug fixing: In some conditions, when Phase 2 fails, IKE service crash.
Bug fixing: No answer to an IKE CERT_REQ message in Aggressive and Main modes.
Bug fixing: Management of DPD (retries and crash in some conditions).
Bug fixing: Improvement of the certificate management during the IKE Service Initialization phase.
Bug fixing: GUI memory leak.
Bug fixing: Integration of a specific workaround which avoids ActiveSync dysfunctions.
Feature: one user certificate/private key/root certificate by tunnel can be used.
Feature: all certificate files are stored in the configuration file and not in separate folders.
Improvement: Miscellaneous improvements for customized releases.
Bug fixing: The management of the timers is enhanced and avoids IKE erratic crashes.
Release 3.11 build 004 (Apr. 2006)
Feature: TheGreenBow IPSec VPN Client is now available in Dutch and Italian.
Bug fixing: VPN GUI crashed when importing too long Certificates.
Bug fixing: VPN drivers crashes on rare PC platforms fixed.
Bug fixing: IKE correctly manages auto-signed Certificates
Bug fixing: "nomail" doesn't appear anymore in the about dialog.
Release 3.10 build 007 (Mar. 2006)
Improvement: WINS and DNS management improved on tunnel closing.
Improvement: Support of GRE protocol.
Improvement: Console traces accuracy improved
Bug fixing: Activation is now available when the internet connection is passing through a proxy.
Bug fixing: IKE or the GUI doesn't crash when reading a wrong formatted VPN configuration file.
Release 3.10 build 005 (Feb. 2006)
Feature: Whole VPN Configuration is now encrypted, locally or on a USB stick
Feature: Importation and exportation can be encrypted and protected with a password.
Importing a protected VPN Configuration automatically asks the user for entering the password.
Feature: Importation and exportation can both be configured through a command line, for example
when a script is used during installation. A complementary argument can be used to specify a password.
Feature: Importation and exportation automatically includes in a single file the Certificates
and the private key.
Feature: The NAT-T IKE parameter can now be configured as "forced", "disabled" or "automatic".
Feature: IP Range enables the IPSec VPN Client to establish a tunnel within a range of a predefined IP addresses.
Feature: Config-Mode allows to obtain a virtual IP address, or a DNS server address or a WINS
server address from the remote Gateway during the Tunnel negotiation (Phase 1).
Improvement: Importation can be done in USB mode, directly on the USB Stick.
Improvement: The design of the "import Certificates" dialog is slightly improved.
Bug fixing: Full license number can be configured through a command line argument, for silent
installation.
Bug fixing: The IKE Service V2.12 fixes the creation of several instances for TgbIke,
which may use 99% of the CPU.
Bug fixing: "cancel" on import dialog doesn't modify the VPN configuration.
Release 3.0
Release 3.0 build 017 (Dec. 2005)
Improvement: "Any" replaces "*" for default local address in Phase 1.
Improvement: Better management of the "Maximum Packet Size" done by VPN drivers.
Improvement: Name Resolution management improved.
Improvement: Portuguese and Spanish versions are packaged in the setup.
Bug fixing: Broadcast IP addresses are correctly casted
Bug fixing: Phase 2 was blocked with specific gateways.
Bug fixing: Full compatibility with Trend Micro firewall anti-virus.
Bug fixing: Various translation fixes.
Bug fixing: WINS and DNS servers name are correctly managed.
Bug fixing: Default values for lifetime durations and DPD parameters are fixed.
Bug fixing: The text of the uninstall final dialog is consistent with the uninstallation
Release 3.0 build 010 (Oct. 2005)
Feature: Domain logon now available with the IPSec VPN Client.
Feature: It is now possible to "force" the email address
for the confirmation of the activation, as a parameter option of the
setup.
Improvement: As many gateways don't work correctly if the
IPSec VPN Client virtual IP belongs to the remote network, users are
warned in case of such a configuration.
Improvement: The 'Open tunnel' button is disabled during a VPN Configuration update (when clicking on 'Save & Apply').
Improvement: Various GUI and activation improvements.
Bug fixing: IKE doesn't allow Quick Mode until X-Auth authentication succeed.
Bug fixing: IKE service doesn't slow down the Windows logon process anymore.
Bug fixing: Misconfiguration avoided when apply a configuration in USB mode without a VPN USB stick being inserted.
Bug fixing: GUI sometime crashed when an X-Auth tunnel took a long time to open.
Release 3.0 build 005 (Sept. 2005)
Feature: Alternate WINS and DNS servers can be
configured for each tunnel. They are used as soon as tunnel is opened,
and may replace the Config-Mode feature when this mode is not proposed
by the gateway.
Improvement: Physical and logical interface changes are better detected under Windows 2000.
Improvement: The URL of the Online Software Activation Server is better handled by the activation process.
Improvement: Config-Mode compatibility with Cisco routers improved.
Improvement: Manual Software Activation (used when trouble contacting Activation Server) is improved.
Bug fixing: Enable/disable Config-Mode function is better managed.
Bug fixing: Various GUI fixes.
Bug fixing: The removal of an empty USB stick is not considered anymore as the removal of a VPN USB stick.
Bug fixing: DNS server is correctly handled, when negociated through Config-Mode.
Bug fixing: Online Software Activation correctly handles license numbers encoded with 20 characters (releases 2.5x and older).
Bug fixing: USB stick in read-only mode are correctly handled.
Bug fixing: Console messages were shortened with long phase1 or phase2 names.
Release 3.0 build 001 (Aug. 2005)
Feature: the new window 'Preferences' allows to setup the startup mode for the IPSec VPN Client.
Three modes are available: Start the IPSec VPN Client before Windows logon, after Windows logon,
or don't start the IPSec VPN Client when Windows starts. (The integration of this feature obsoletes
the previous stand-alone configuration tool 'vpnstart.exe').
Feature: Full DPD (Dead Peer Detection) support. Based on DPD, the IPSec VPN Client can clear
remaining SA that would have stayed open otherwise.
Feature: X-Auth popup is enabled and may be used for X-Auth VPN authentication.
Feature: NAT-T in aggressive mode full support.
Feature: New console fixes display problems and improves ergonomy.
Feature: Ability to disable the network interface detection mechanism. This feature is useful
for the IPSec VPN Client to be used with wireless connections like GRPS or WiFi, which are often disrupted.
Feature: Full support of online software activation, using a new activation wizard.
Feature: IKE Config-Mode full support.
Feature: Redundant Gateway support. This feature allows the IPSec VPN Client to open an IPSec VPN
tunnel with an alternate gateway in case the primary gateway is down or not responding.
Feature: A new link "Check for updates…" in the main menu '?' allows to check if a new release
is available for download.
Feature: It is now possible to open/close tunnel directly from the tray icon menu (right click).
Feature: New encryption and hash capabilities have been added such as: AES 512, DH 1536, DH 2048 and RSA 2048
Feature: Ability to configure a script – or an application – to be executed as soon as the
tunnel is opened.
Improvement: A new window 'Phase2 advanced' allows to configure the way a tunnel can be opened.
Three modes are available: the tunnel may open when the IPSec VPN Client starts, on traffic detection, or
when a USB stick is inserted.
Improvement: The tray icon is green, instead of red previously, when at least one tunnel is opened.
Improvement: The encryption of the internal configuration file improves its security.
Improvement: The 'About' window now references the license number, owner email or remaining time for evaluation.
Release 2.51
Release 2.52 build 004 (Aug. 2005)
Improvement: The button 'Open Tunnel' (Phase 2) automatically changes to 'Close Tunnel' as soon as
the tunnel is opened, and conversely.
Improvement: The IPsec VPN Client does not trigger automatic tunnel creation with following frames:
Broadcasts, DHCP and DNS.
Bug fixing: The IPSec VPN Client does not generate ARP response for the local adapter's own IP address.
Bug fixing: The IPSec VPN Client works with Windows 2003 Server.
Bug fixing: The GUI now waits indefinitely the VPN services to be started. This avoids the IPSec VPN Client
to not detect the startup of VPN services when Windows starts slowly.
Release 2.51 build 016 (Jul. 2005)
Improvement: The VPN Configuration File location is identified with icon on the bottom left corner
of the main window, and the Configuration File Location window is simplified.
Bug fixing: The configuration is correctly saved and applied at the end of the (standard) configuration wizard.
Release 2.51 build 015 (Jun. 2005)
Improvement: Empty Phase1 and Phase2 windows after import are replaced by the 'configuration' window.
Improvement: The remaining file 'tgbvpn.conf_bak' is correctly removed during uninstall.
Bug fixing: AES algorithm is correctly imported (not replaced by 3DES)
Improvement: limited char set for phase name (phase 1 and 2): [a-z][A-Z][0-9][_.()] are allowed.
Improvement: the url associated with the 'buy' button of the registration window may be entirely
specified in our customization process.
Improvement: default/min/max lifetime are checked (min<max, and min<def<max).
Bug fixing: phase name limited to 49 char, and phase 1 name always correctly memorized by GUI.
Bug fixing: IKE is not run if it's already running ("IKE multi-instances" bug).
Bug fixing: selection of GRP14 in phase2 was wrongly taken as GRP1.
Bug fixing: a drive network is not seen as a USB drive anymore.
Bug fixing: network interface detection is now correctly handled (ethernet disconnection/wan connection)
and doesn't hang with an IKE crash.
Bug fixing: start/stop popup behaviour fixed (cancel button, never-ending popup, Software ends when
cancel is selected).
Bug fixing: GRP1 correctly set as default on phase1 if not found in config file.
Bug fixing: IKE restart process didn't restart each time.
Bug fixing: DPD interval & period cannot be less than 15.
Bug fixing: usage of VpnHide and display of the tray icon menu are consistent.
Various minor bugs fixing: wrong char at the end of strings in the console, console line number set
to zero on 'clear', warning on USB in read-only mode, "License number" label in registration window is
consistent with user guide.
Release 2.51 build 010 (May 2005)
Improvement: the X-AUTH login and password length is increased to 127 characters.
Bug fixing: Crashes in Aggressive Mode with some specific routers fixed.
Bug fixing: NAT-T keep alive fixed (problem was due to wrong frame length).
Bug fixing: AES management is now compatible with lifetime parameters.
Release 2.51 build 008 (Mar. 2005)
Feature: Localization in Portuguese and Spanish. The
IPSec VPN Client is available now in French, English, German,
Portuguese and Spanish
Bug fixing: Switch between the Certificate and PresharedKey radiobutton (Phase 1) fixed
Improvement: The RemoteID and LocalID may have a length up to 1023 characters
Improvement: The timers waiting for the VPN services are
increased, to avoid these services are not detected by the IPSec VPN
Client
Feature: Compatibility with Windows XP Server 2003
Supported Windows versions: 95, 98 ,Me, NT, 2000, XP (WinXP SP2 and XP Server 2003)
fixed: VPN watchdog "tgbstarter" works on Windows NT4.
Compatibility with Billion, Linksys WRV54G, HotBrick and
SmoothWall. For more about Billion, Linksys WRV54G, HotBrick and
SmoothWall see also VPN Certified gateways.
Supported Windows versions: 95, 98 ,Me, NT, 2000, XP (WinXP SP2)
Release 2.50
Release 2.50 build 019 (Nov. 2004)
Tunnels maintained after an interface interruption (Dial-Up, LAN, GPRS, ...)
Several GUI improvements
Better management of "VPN" USB drive among several USB devices
Several bugs fixed (fragmented packets, ...)
Compatibility with Apliware (Linux Appliance StrongS/WAN
based), Numlog (Linux Applicance FreeS/WAN based). For more about
Apliware, Numlog see also VPN Certified gateways.
Supported Windows versions: 95, 98 ,Me, NT, 2000, XP (WinXP SP2)
Release 2.50 build 013 (Sept. 2004)
When several tunnels open simultaneously, some doesn't open: fixed.
Systray menu is correctly disappearing
GUI labels more explicits
Wrong USB drive detection when IPSec VPN Client is starting: fixed.
"space" character allowed for the preshared key.
Aggressive mode fully operationnal
Compatibility with Cisco X-AUTH (Cisco 2621). For more about Cisco 2621, see also VPN Certified gateways.
Supported Windows versions: 95, 98 ,Me, NT, 2000, XP (WinXP SP2)
Release 2.50 build 001 (Jun. 2004)
Encryption performance enhanced (over 4x faster than the previous release)
USB Stick management:
- Auto close, auto open IPSec tunnels when plug in or remove USB Stick.
- Security elements (e.g. PSK, Certificates, network config...) are stored on the USB Stick
- An USB Stick cannot be used on other computers
- On-the-fly USB Stick personalization and deployment
- More info on our IPSec VPN Client with USB Stick page
Ergonomy improvements:
- Start/stop popup
- Progress bar while opening tunnels
- New labels to ease configuration comprehension
- Configuration wizard simplification
Privacy improvements with sensitive configuration data encrypted
The items "USER_FQDN" and "FQDN" are replaced for better understanding with "email" and "dns"
(Advanced menu in Phase1 configuration)
When the interface is hidden", the traybar menu shows "Stop & Quit" and "Restart VPN" functions.
The modem connexions are correctly handled: when the IPSec VPN Client si running, a modem connexion
is started, the dynamic IP address is correctly managed by the IPSec VPN Client
TIP: With this fix, users can now configure automatic remote connexions to the corporate
Intranet: just create a shortcut to page on the Intranet (if it is a VPN target defined in the IPSec VPN client).
Double-clicking on the shortcut will automatically dial up, open the ipsec tunnel and display the
Intranet pages.
Correction: Importation of the "private key" of a certificate correctly renamed in "local.key"
Correction: The traybar icon tooltip is correctly translated in english and german
Sometimes, non secured connexions were truncated. This problem is fixed
Supported Windows versions: 95, 98 ,Me, NT, 2000, XP
Release 2.02 (Mar. 2004)
Problem of tunnel renegociation fixed (including a correct closing of tunnels)
Problem with MTU/PPPoE fixed
The 'Interface' IP Address isn't lost anymore after closing the Client
3 error messages added in Console when the VPN service is not properly launched.
SA deletion fixed
The configuration cannot be saved as long as the IP Remote address is empty
The 'not visible' GUI mode is correctly managed on Win2000 and WinXP
Fixed: the command line "vpnconf /stop" actually stops the tgbike service
The 'space' character is forbidden in a Phase name
Release 2.00 (Feb. 2004)
new interface : nicer, easier to read, user-friendly. With TheGreenBow IPSec VPN Client, you won't
waste your time searching in dialog boxes for the requioptionWell, it's still technical, but TheGreenBow IPSec
VPN Client is easier to set up than any other vpn ipsec client
Possibility to open a tunnel directly from the interface (in Phase 2) of TheGreenBow IPSec VPN Client,
without the need to initiate a connection through a Ping or a data transfer when testing the parameters.
New encryption algorithms: AES128, 192 and 256
IKE engine now starts as a service: active VPN tunnels aren't broken when swapping from a user to another
Possibility to open automatically tunnels during Windows boot. This feature is useful for remote administrators
who need to be able to connect to mobile computers (and cannot know their dynamic IP).
Possibility to inactivate some VPN targets (phase 1). This can be very useful when a mobile PC is plugged on
the corporate LAN, to avoid the automatic negotiation of a VPN tunnel. It can also be used to prepare a global
configuration, and activate only the needed tunnel.
Possibility to hide the interface: this prevents users to modify VPN parameters by mistake. Separate feature, see IPSec VPN Client FAQ
Release 1.4
Release 1.49 (Nov. 2003)
Adding a special section in the import file format, allowing to include Certificates and User Private keys in
the import file, thus facilitating the distribution of certificate based configurations to multiple users. For more
information about the import file format, contact
Release 1.48 (Nov. 2003)
Improved rekeying Phase 1 (IKE) providing full compatibility with FreeS/WAN based equipments
Correcting an error leading to TheGreenBow IKE module (tgbike.exe) being terminated by the system
under special conditions, involving multiple Network adapters activated simultanuousely
Release 1.47 (Oct. 2003)
Minor problem causing conflicts (under special conditions) with Antivirus Software , causing a
"racing condition" during system startup. In some cases, TheGreenBow GUI (vpnconf.exe)
crashed and had to be re-started manually
Release 1.46 (Sept. 2003)
Preshared key is hidden on entry
Compatibility with SonicWall and Symantec. The support of SonicWall VPN appliances
allows us to deliver strong IPSec VPN solution for remote access in large enterprises.
SonicWall family of Internet Security Appliance are multi-service security gateways
from medium to large networks. For more information about SonicWall, see also VPN Certified Gateways.
Release 1.45 (Aug. 2003)
Added IDs in phase 1 (see "Advanced" menu in P1) for Freeswan compatibility
Special chars admitted in preshared key
Release 1.44 (Jul. 2003)
Space caracter not allowed in the name for the VPN connection in the Wizard
Maximal length of the preshared key increased
Maximal length of the Phase 1 IDs increased
In Phase 1 label "Port" changed to "NAT Port"
Please have a look at our 30 days free evaluation software download
