Call a Specialist Today! 800-886-5369

NCP Secure Entry Client for Windows 32/64 bit
Simple and Highly Secure Remote Access via Internet

NCP Secure Entry Client for Windows 32/64 bit

NCP Products
NCP Universal VPN Client Suite
NCP Secure Entry Client (Windows 32/64 Bit), 1 to 9 users
*Price per user. Quantity must be 1 or greater
#NEYW1
Our Price: $113.85
NCP Secure Entry Client (Windows 32/64 Bit), 10 to 24 users
*Price per user. Quantity must be 10 or greater
#NEYW2
Our Price: $94.30
NCP Secure Entry Client (Windows 32/64 Bit), 25 to 49 users
*Price per user. Quantity must be 25 or greater
#NEYW3
Our Price: $87.40

More pricing below, click here!

Overview:

Secure VPN connections for desktop, laptop or tablet PCs running on Windows operating systems 10, 8.x, 7, Vista or Windows Mobile.

The NCP Secure Entry Client for Windows is a component of NCP's Next Generation Network Access Technology. Being a one-click solution, the IPsec client software automatically selects the appropriate firewall policy and the best possible communication medium, controls internet connectivity and initiates the setup of a VPN tunnel. A centrally defined parameter lock prevents intentional or accidental configuration setting changes by users.

Recommended for organizations with up to 50 remote access users and without a requirement for central management. The VPN software is compatible with all common IPsec VPN gateways and can also be used with Microsoft Windows Server 2008 R2 as it supports IKEv2.

Features:

Secure

Rely on high-quality IT security software made in Germany

  • IPv6 supported dynamic personal firewall
  • data encryption
  • strong authentication
  • multi-certificate support
  • parameter locks
  • FIPS Inside
  • support of OTP (one time password tokens) and certificates in a PKI (Public Key Infrastructure)

Efficient

Mindful of one of the biggest challenges organizations face – cost savings

  • Budget Manager for full cost control
  • support for 3G/4G hardware (LTE)
  • Custom Branding Option

Ease of use

Reduced IT complexity

  • a single and easy-to-use user interface (one click) for the connection setup
  • integrated support for 3G/4G hardware
  • a reliable, uninterrupted VPN connection
  • automatic, location-aware adaption of firewall rules through the NCP VPN Client
  • automatic media recognition
  • seamless Roaming
  • easy domain registration

Mobile

The best mobile device user experience

  • Working without dropped connections or interruptions even when switching between networks, i.e. seamless roaming
  • auto-connect to your corporate network
  • reliable and uninterrupted VPN connections
  • quick and secure hotspot logon
  • Remote Access even behind firewalls, whose port settings typically deny IPsec based communication, i.e. NCP Path Finder® Technology

Technical Data:

Secure Entry Client for Windows 32/64 bit: Technical Data
Operating Systems Microsoft Windows (32 and 64 bit): Windows 10, Windows 8.x1, Windows 7, Windows Vista
Security Features The Entry Client supports all IPsec standards in accordance with RFC
Personal Firewall Stateful Packet Inspection; IP-NAT (Network Address Translation); Friendly Net Detection (FND) (Firewall rules are automatically adapted, if the connected network is recognized because of its IP address area, or the NCP FND server's); start FND dependent action; secure hotspot logon; differentiated filter rules relative to: protocols, ports, applications and addresses, LAN adapter protection; IPv4 and IPv6 support
Virtual Private Networking IPsec (Layer 3 Tunneling),conform to RFC; IPsec proposals can be determined through the IPsec gateway (IKE/IKEv2, IPsec Phase 2); Event log; communication only in the tunnel; MTU size fragmentation and reassembly, DPD, NAT-Traversal (NAT-T); IPsec tunnel mode
Encryption Symmetric processes: AES 128,192,256 bits; Blowfish 128,448 bits; Triple-DES 112,168 bits; Dynamic processes for key exchange: RSA to 2048 bits; seamless rekeying (PFS); Hash algorithms: SHA-1, SHA-256,SHA384, SHA-512, MD5, DH group 1,2,5,14-21, 25, 26
FIPS Inside The IPsec Client incorporates cryptographic algorithms conformant with the FIPS standard. The embedded cryptographic module incorporating these algorithms has been validated as conformant to FIPS 140-2 (certificate #1051). FIPS compatibility is always given if the following algorithms are used for set up and encryption of the IPsec connection:
  • DH Group: Group 2 or higher (DH starting from a length of 1024 Bit)
  • Hash Algorithms: SHA1, SHA 256, SHA 384, or SHA 512 Bit
  • Encryption Algorithms: AES with 128, 192 and 256 Bit or Triple DES
Authentication Processes IKE (Aggressive mode and Main Mode), Quick Mode;
XAUTH for extended user authentication;
IKE config mode for dynamic assignment of a virtual address from the internal address pool (private IP);
PFS;
PAP, CHAP, MS CHAP V.2;
IEEE 802.1x: EAP-MD5 (Extensible Authentication Protocol): Extended authentication relative to switches and access points (Layer 2);
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security): Extended authentication relative to switches and access points on the basis of certificates (Layer 2);
support of certificates in a PKI: Soft certificates, smartcards, and USB tokens: Multi Certificate Configurations;
Pre-shared secrets, one-time passwords, and challenge response systems; RSA SecurID ready.
Strong Authentication - Standards X.509 v.3 Standard; Entrust Ready
PKCS#11 interface for encryption tokens (USB and smartcards); smartcard operating systems: TCOS 1.2, 2.0 and 3.0; smart card reader interfaces: PC/SC, CT-API;
PKCS#12 interface for private keys in soft certificates;
CSP for use of user certificates in Windows certificate store PIN policy;
PIN policy; administrative specification for PIN entry in any level of complexity;
Revocation: EPRL (End-entity Public-key Certificate Revocation List, formerly CRL), CARL (Certification Authority Revocation List, formerly ARL), OCSP.
Networking Features LAN emulation: Ethernet adapter with NDIS interface, full WLAN (Wireless Local Area Network) and WWAN (Wireless Wide Area Network, Mobile Broadband from Windows 7) support
Network Protocol IP
Dialers NCP Internet Connector, Microsoft RAS Dialer (for ISP dial-in via dial-in script) connection manager for international dial-in via GoRemote (formerly GRIC), UuNet, Infonet, MCI (on request)
VPN Path Finder2 NCP Path Finder Technology: Fallback IPsec/ HTTPS (port 443) if port 500 respectively UDP encapsulation is not possible
Seamless Roaming2 If a communications medium error occurs, automatic switchover of VPN tunnel to another Internet communication medium (LAN/WWAN/3G/4G) without altering IP address ensures that applications communicating over VPN tunnel are not disturbed and application session is not disconnected. (prerequisite: NCP Secure Enterprise VPN Server)
Additional Features UDP encapsulation, WISPr-support, IPsec-Roaming, Wi-Fi roaming, import of the file formats:.ini, .pcf, .wgx and .spd, Multi Certificate Support
Transmission Media Internet, LAN, WI-FI, GSM (inkl. HSCSD), GPRS, UMTS, LTE, HSDPA, PSTN, ISDN
IP Address Allocation DHCP (Dynamic Host Control Protocol), DNS: Dial-in to the central gateway with changing public IP addresses through IP address query via DNS server
Line Management DPD with configurable time interval; Short Hold Mode; Wi-Fi roaming (handover); channel bundling (dynamic in ISDN) with freely configurable threshold value; timeout (controlled by time and charges); budget manager (administration of connection time and/or –volume for GPRS/ 3G and Wi-Fi, in case of GPRS/ 3G separated administration of roaming abroad)
APN of SIM Card The APN (Access Point Name) defines the access point of a mobile data connection at a provider. If the user changes provider, the system automatically takes APN data from the corresponding SIM card and uses it in client configuration
Data Compression IPCOMP (lzs), deflate
Point-to-Point Protocols PPP over ISDN, PPP over GSM, PPP over Ethernet; LCP, IPCP, MLP, CCP, PAP, CHAP, ECP
Internet Society RFCs and drafts RFC 2401 –2409 (IPsec), RFC 3947 (NAT-T negotiations), RFC 3948 (UDP encapsulation), IP security architecture, ESP, ISAKMP/Oakley, IKE, XAUTH, IKECFG, DPD, NAT Traversal (NATT),UDP encapsulation, IPCOMP
Client Monitor
Intuitive, Graphical User Interface
Multilingual (German, English, Spanish, French);
Client Info Center;
Configuration, connection management and monitoring, connection statistics, log-files (color displayed, easy copy&paste-function);
Internet availability test;
Trace tool for error diagnosis;
Traffic light icon for display of connection status;
Integrated support of Mobile Connect Cards (PCMCIA, embedded);
The Client Monitor can be tailored to include your company name or support information; Password protected configuration management and profile management, configuration parameter lock;
Automatic check for newer software version

1. From version 9.3 onwards, all NCP Secure VPN Clients (Win32/64) support Windows 8 in 32 bit and 64 bit mode - naturally, in addition to Windows 7, Vista and XP.
For Windows 8 support you will need a 9.3 license key or higher.
The following VPN Client versions support Windows 8:
- NCP Secure Entry Client (Win32/64) Version 9.3 Build 146
- NCP Secure Enterprise Client (Win32/64) Version 9.3 Build 162
- NCP Secure Client Juniper Edition Version 9.3 Build 146

2. Prerequisite: NCP VPN Path Finder Technology on the Gateway is required or NCP Secure Enterprise Server

FAQs:

Which client software does NCP offer?

NCP offers Secure Entry clients and Secure Enterprise clients for universal access to central data networks. Both support all security technologies (VPN, PKI) and use the same communications and security standards. The latter can be administered centrally and can be bundled with the NCP Endpoint Security concept.

What do I have to consider when updating from Windows 7 or 8 to Windows 10?

When updating from Microsoft Windows 7, Windows 8 or Windows 8.1 to Microsoft Windows 10, it is vital that the NCP Secure Client be uninstalled before starting the update.

At the same time it is recommended that the configuration file, as well as the certificates used, is saved separately.

After the Upgrade to Windows 10 is completed, make sure to install version 10.02 (or later) of the NCP Secure Client as previous versions are not supported for Microsoft’s most recent OS.

Please note that a license key version 10.0 is required to run version 10.02 of the NCP Secure Client on Windows 10.

What do I have to consider when updating from Windows 7 to Windows 8?

Under certain circumstances , when the operating system is upgraded from Windows 7 to Windows 8, the NCP Secure Client no longer works after the upgrade. In such a case, download the latest version of the NCP Secure Client from the NCP website and install this over the existing version of the Secure Client; afterwards the Secure Client software should work correctly.

What do I have to consider when updating from OS X 10.10, 10.9 or 10.8 to OS X 10.11 El Capitan?

If the NCP Secure Client for Mac is installed on an older operating system, e.g. OS X 10.10, and you update to OS X 10.11 El Capitan, an error message could appear indicating that the NCP Secure Client cannot access the log. The user can fix this malfunction by entering the following command in the command line: sudo chmod 777 /Library/Logs/NCP. Otherwise you can uninstall the NCP Client before the update and install it again after the update.

Is the NCP Secure Mac OS X Client release 2.02 build 14 compatible with the Mac OS X 10.8 Mountain Lion operating system?

In priniciple, the NCP Secure Mac OS X Client release 2.02 build 14 is compatible with Mac OS X 10.8 Mountain Lion. However, the "Gatekeeper" security feature, newly introduced with Mountain Lion, must be disabled before starting a new install or update of the NCP Secure Client. Before starting the install routine, the OS X System Preferences must be modified: under "Security & Privacy/General" temporarily change the setting of "Allow applications downloaded from" to "Anywhere". As soon as the installation or update is complete, the "Gatekeeper" parameter can be changed back to its previous value. No further changes are required, not even after a restart of the machine.

Which operating systems and end devices does NCP Secure Windows Mobile Client support?

The supported operating systems for the NCP Secure Windows Mobile Enterprise Client can be found in the data sheet.
The supported operating systems for the NCP Secure Windows Mobile Entry Clients can be found in the data sheet.

Does the NCP Secure Client support Symbian 3?

NCP currently offers a VPN client for S60 3rd edition. Owing to the current situation - liquidation of the Symbian foundation, withdrawal of large suppliers like Samsung and Sony Ericsson - NCP still reviews its support of the new operating system Symbian^3. NCP closely monitors the respective market and reserves the right to act according to the demands of the market.

Will Android based devices be supported by the NCP SSL VPN solution?

Yes

Is there an NCP Secure Client for Android?

You can choose between two versions:

  • NCP Secure VPN Client for Android
  • NCP Secure VPN Client Premium for Android

Does NCP support the VPN Client pre-installed in Android devices?

Yes. Those Android based devices with the works-installed VPN Client can use that VPN Client to establish a VPN Tunnel to NCP Secure Enterprise VPN Server (from version 8.05). The protocol used in such a connection is L2TP over IPsec.

Will iOS based devices (Apple iPhone/iPad) be supported by the NCP SSL VPN solution?

Yes

Is the NCP Secure Client supported on Apple iOS?

NCP plans to provide Secure Clients for Apple iOS. However, due to technical restrictions imposed by Apple, NCP is not currently able to develop Secure Client versions for this operating system. The required information from Apple is not yet available.

Does NCP support the VPN Client pre-installed in Apple iOS?

Yes. Apple iOS, from version 3 onwards, includes an IPsec VPN Client which can establish a VPN Tunnel to an NCP Secure Enterprise VPN Server.

Is the NCP Secure Client supported on Windows 8 RT and Windows Phone 7/8?

Currently NCP provides VPN Clients for Windows 7, Windows 8 and Windows Mobile 5/6.x. For the other Windows OS we provide our SSL VPN solution (Web Proxy). NCP also plans to provide IPsec VPN Clients for Windows 8 RT and Windows Phone 7/8, Microsoft’s new operating systems. However, due to technical restrictions imposed by Microsoft, NCP is not currently able to develop Secure Client versions for these operating systems. The information required from Microsoft is not yet available.

Does the NCP secure client also work with VPN gateways from third-parties?

Yes, based on the IPSec standard, incl. all RFC protocol enhancements (XAUTH, IKEConfig, NAT-T).

Is there a way to easily import client configuration files from other vendors?

Yes, you can automatically import .pcf, .wgx, .spd or .ini files.

I'd like to set up a (really) secure VPN connection without being at the mercy of the Internet or public WLAN. Is that possible with the secure client from NCP?

Yes. NCP secure clients have an integrated, dynamic personal firewall and support FND (Friendly Net Detection).

How do I update my NCP Software?

Updates:

Updates can be free-of-charge or they must be purchased. This depends on whether the new software has signifi-cant new features:

  • Updates are free of charge if a new minor release is introduced on the market
  • Updates must be purchased if a new major release is introduced on the market

Major Release

Major releases contain significant changes; i.e. extensions in performance and function that are not error correc-tions. Must be purchased: New license key

Example: 9.10 update to 9.20, or 9.12 update to 9.20

Minor Release

Minor releases contain error corrections and minor improvements.
No-charge: No new license key (LK) is required
Example: e.g. 9.22 update to 9.23

Note:

If a new version is used with the existing LK, then only the bug fixes can be used, the new "significant changes", cannot be used. Purchase of a new LK is necessary for this. Two methods are possible:

  1. The new LK is assigned as part of an Update Service Contract that must be purchased
  2. Individual order of the new LK at NCP (compliance with the charged version jumps)

Important note: There is no duty for Updates

Where can I find the information of the current version I use?

You can find the information at the Client Monitor. Click on "Help" at the menu bar and choose "Info".

What are the differences between NCP Secure Entry Client, NCP Secure Enterprise Client and NCP Secure Client - Juniper Edition?

All clients have a similar range of features, but the NCP Secure Enterprise Client can also be administered centrally.

Do I need a personal firewall at my tele-workplace as well as the NCP secure client?

No. All VPN clients from NCP have an integrated personal firewall which can also be administered centrally in the case of the Secure Enterprise client.

Can I save my company logo or a project logo to the Client Monitor and if so, how?

Both Secure Enterprise (Win32/64) as well as the Secure Entry Client (Win32/64) offer the option to save your company logo in a dedicated monitor field.

An additional information field is displayed as standard in the Secure Entry Client monitor. This can be replaced or removed. An HTML file, saved in the local installation directory, is displayed in the web browser after a mouse click on this field. You can find all the information about saving your company or project logo.

Entry-Client-Firewall-und-FND_Seite14_15_e.pdf

Yes, you'll find details in the PDF "Entry Client Firewall and FND"

How does the NCP client provide secure Hotspot logon?

Yes, you'll find details in the PDF "Entry Client Mobile Computing"

Does the NCP solution address the issue of overlapping IP networks?

Yes.

Is there a possibility to lock the settings for VPN, Internet Access and Personal Firewall in order to prevent users from misconfiguration?

Yes.
You'll find details about the NCP Secure Entry Client in the PDF "Entry Client Monitor"
You'll find details about the NCP Secure Enterprise Client in the PDF "Enterprise Client Monitor"

What happens if you unplug an external certificate storage device (e.g. smartcard, USB flash drive, SD card)?

The VPN connection is immediately and automatically disconnected if the default setting is still in place. If the VPN connection is to remain, you can configure this specifically.

Do NCP's Secure Clients support WWAN Hardware (Wi-Fi, 3G) with NDIS 6.2 driver for Windows 7 (e.g. Sierra Wireless, Huawei, Option)?

Yes, they do. The architecture of NCP's Secure Clients allows for a smooth VPN connection.

Which ports and protocols are used for IPsec?

UDP 500, UDP 4500 and ESP

Pricing notes:

NCP Products
NCP Universal VPN Client Suite
NCP Secure Entry Client (Windows 32/64 Bit), 1 to 9 users
*Price per user. Quantity must be 1 or greater
#NEYW1
Our Price: $113.85
NCP Secure Entry Client (Windows 32/64 Bit), 10 to 24 users
*Price per user. Quantity must be 10 or greater
#NEYW2
Our Price: $94.30
NCP Secure Entry Client (Windows 32/64 Bit), 25 to 49 users
*Price per user. Quantity must be 25 or greater
#NEYW3
Our Price: $87.40
NCP Universal VPN Client Suite Update
NCP Secure Entry Client (Windows 32/64 Bit) Update, 1 to 9 users
*Price per user. Quantity must be 1 or greater
#UEYW1
Our Price: $56.93
NCP Secure Entry Client (Windows 32/64 Bit Update), 10 to 24 users
*Price per user. Quantity must be 10 or greater
#UEYW2
Our Price: $47.15
NCP Secure Entry Client (Windows 32/64 Bit) Update, 25 to 49 users
*Price per user. Quantity must be 25 or greater
#UEYW3
Our Price: $43.70