How to (Successfully) Install Cisco VPN Client on Windows 7

windows7If you do not follow these instructions when installing the Cisco VPN Client on Windows 7, you will probably end up in an endless blue screen / reboot cycle!


  1. Uninstall any previous version of Cisco VPN client that you may have installed
  2. Reboot
  3. Download the Citrix DNE Update and install it.
  4. Reboot
  5. Make sure you have Cisco VPN Client (or newer, if available)
  6. Install the Cisco VPN Client
  7. Reboot


** Check out some of the additional steps others have taken below if you run into problems

Brenton House

Recent Posts

Tag Cloud


  • For those of you that do not get this to work, you might have to do some additional stuff before rebooting in step 7. At least I did.
    I had to remove the ndis.sys file after installing the VPN client and before rebooting. Then when you reboot Win 7 will repair this file and you are prompted to reboot once again and now it will work.

  • I have tried many--many different ways to get the Cisco VPN client install on Windows 7--all resulting in BSOD (ndis.sys). I have found the following procedure has worked 100% of the time on multiple hardware platforms (including VMware):

    1. Install Cisco DNEupdate.
    2. Reboot
    3. Take ownership and delete ndis.sys (in c:\windows\system32\drivers).
    4. Take ownership and delete ndis.sys.mui (in c:\windows\system32\drivers\en-us).
    5. Install Cisco VPN Client
    6. Reboot
    7. Windows 7 will repair itself (should take a few seconds) and automatically reboot.
    8. Cisco VPN Client should work without any other tweaks.

    Hope this helps.

  • To further elaborate on steps 6 & 7;

    6. Insert your Windows 7 install disc.

    6a. Restart into the Windows 7 install when prompted otherwise the OS will go into error recovery.

    7. Select your language, time & currency and click 'Next'.

    7a. Click 'Repair your computer' at the bottom.

    7b. Click 'Next >' to start the repairing the OS.

    The Startup Repair wizard kicks in and works its magic. How long it will take to repair WILL vary.

  • Works with Windows 7 64-Bits?

  • The steps by JoshP and RandyM worked for me. Using the DVD for the Startup Repair seemed to be what finally did the trick.

  • Thanks for these instructions. I was able to successfully install Cisco VPN on Windows 7 beta using RandyM and JoshP's detailed steps. Works like a charm

  • Have you tried OpenVPN? I just got through setting it up on my network.
    It works really well. Setup can be a little hairy,
    but I found a quickstart tutorial on the web and got everything squared away in about an hour.
    It also has a lot of functionality (complexity) if you need to go down that road.

  • What do you mean with "take ownership". my problem is: how can i delete ndis.sys(.mui)? i don't have the rights for it, how can i get them?


  • I was able to successfully install Cisco VPN on Windows 7 beta

  • Steps didn't work for me, as windows didn't restore the deleted files upon reboot. I had to restore them manually with an elevated command prompt (using a different windows partition) and copy the original files over from the windows sxs folder (find them with the command: [dir /s ndis.sys]) Reboot now works.

  • Thanks very much for this as it worked like a charm!

  • I was able to successfully install Cisco VPN on Windows 7 build 7057/

  • Does these steps work on Vista 64-bit too? I'm trying to install Cisco VPN on this machine and running into the issues.

  • I was able to successfully install Cisco VPN on Windows 7 beta, but it runs way slower than the same VPN software installed on the same PC under Vista. Any thoughts?

  • I got it working before on a simpler way, but I forgot. So I tried the steps here and I had to run Ubuntu LiveCD to save the install.

    Anyway, I think the essence is as below:
    - change the ndis.sys permission to Everyone or something wide open.
    - make a backup somewhere else.
    - install VPN client.

  • Does this work for 64 bit win7 also ? I tried the same steps that joshP mentioned in my 64bit windows 7 7068 build. The winFix & DNEupdate64bit isntalled fine, but the cisco vpnclient setup is erroring out saying that this version of setup does not support 64-bit.

  • The Cisco VPN client supports Windows 2000, XP and Vista (x86/32-bit only); Linux (Intel); Mac OS X 10.4; and Solaris UltraSparc (32 and 64-bit).

    For x64 (64-bit) Windows support, you must utilize Cisco's next-generation Cisco AnyConnect VPN Client.

  • I have successfully installed Cisco VPN Client in Windows 7 RC Build 7100 following the next Steps:

    1. Install Cisco DNEupdate.

    2. Reboot

    3. Modify properties of Cisco installer vpnclient_setup.exe to compatibility mode tab to Vista SP2

    4. Install Cisco VPN Client as usually.
    5. Reboot
    6. Cisco VPN Client Worked perfect without any other modification.

    I supposed that Windows RC 7 Build 7100 has better compatibility support that the Beta and previous versions.

  • Just wanted to confirm Chovija's solution was successful for me. Uninstall your previous client first (if you upgraded to 7100) then follow the steps above.

  • After a couple failed attempts, I found the instruction here and got it installed.

    However, when I tried to connect, I got an error:
    Reason 442: Failed to enable Virtual Adapter

    I found that the failed attempts had installed an adapter/connection. I cleaned that up and everything worked perfect after that. Here's what I did:

    1. Go to Control Panel\Network and Internet\Network and Sharing Center
    2. Click Change adapter settings (in left menu)
    3. Delete or disable every extra 'Local Area Connection' there with 'Cisco Systems VPN Adapter' as description
    4. On the remaining single connection for 'Cisco Systems VPN Adapter', you may need to repair the connection (right-click > Diagnose)

    I was unable to delete the connection from there, only disable. That worked, but then I really wanted to clean house and delete those extra connections. I found them in the registry by searching for 'Cisco Systems VPN Adapter #' and deleted them. Only the extra connections had the '#2', '#3', etc. so that '#' is important to finding/deleting the right ones.

  • I had upgraded from Vista to Windows 7. I got the BSOD relating to ndis.sys when attempting to uninstall the client.

    After the computer restarted, all my network adaptors stopped working.

    I followed the instructions to delete ndis.sys and ndis.sys.mui, then uninstalled the Cisco VPN Client. Then installed it again, then rebooted, and everything worked perfectly.

    Thanks for the info.

    PS: Re taking ownership of files to delete them.. You need to right click on the file, select properties, then go to security. Use the "advanced" button at the very bottom. In the advanced window, choose the "Owner" tab. Then click on the "Edit" button. Choose either yourself, of a group you are in, then OK, and OK. Being owner of the file, you can then change the permissions of the file to give yourself full control over it. Then you can delete.

  • Using Windows 7100 build and tried Chovija's solution. Worked perfectly to fix a failure to connect under 5.0.3...VPN version. Thanks Chovija!

  • Hey all,
    Remember that although this "works', it is NOT supported by Cisco or MS. This should be taken into account before using this method in an enterprise environment.

    Our organization has decided that this method is outside the scope of what we will want to support.

    another NetAdmin

  • I don't why people keep saying the installation of the Cisco VPN client works, has anyone actually tried to use it afterwards? no packets get tunneled at all. Builds 7100, 7127, 7137 & 7201. New installs from scratch - wipe the drive, install OS, install Citrix DNE Update as administrator, reboot, install Cisco VPN Client as administrator, reboot, import .PCF file, double click on a connection, enter username & password, client connects, then nothing. can't ping hosts on secure network via IP, netbios, FQDN, can't connect to anything, no RDP, can't UNC, can't administer servers, statistics show packets getting discarded for any tunneled domains, traffic to the internet (i.e. non-tunneled traffic) works fine.

  • Successfully installed Cisco VPN Client on Windows 7 RC1 build 7100 using Chovija's instructions above (Citrix DNE update, reboot, install VPN client in VistaSP2 compatibility mode). Worked without having to rename/repair drivers.

  • Perfect!
    Remove old client, install latest DNE update, install client again
    Job done!

  • i have done most of the above but the vpn client refuses to install givig me an internal error 2738 or something like that... any ideas?!

  • What happens if you have a netbook with no ability to insert the Windows 7 install CD??

    How can I work around this?

  • I can get it to install fine using the xp compatability mode. Once installed it connects but then i cannot access anything.

  • The installed client doesn't work for me either. Although the client connects I cannot reach any resources. Moreover, it drops my internet connection after a while.

  • I can concur the following worked with Windows 7 RTM:

    1) Install DNE Update
    2) Reboot
    3) Install Cisco VPN client using compat. mode Windows XP SP3
    4) Reboot

    No fancy stuff with ndis.sys whatsoever. And yes, I did test it and RDP'd to a server. Works fine.

  • I'm one the lucky ones having Windows 7 Ultimate RTM. Cisco VPN client installed smoothly and so did Citrix XenApp. No need of Citrix DNE update.
    So it seems that Microsoft has done the necessary for the final version of Windows 7.

  • The original instructions worked perfectly for me.. mainly since my requirement was to uninstall the existing program (it wasn't getting connected after I upgraded to Win7).
    Now, I am able to connect to the network after the re-install. Thanks Brenton.

    PS: The version of vpn client that I am using is Just wanted to tell that even this version (older) works on Windows 7.

  • I've fresh installed the free RC of Windows 7 (build 7100) and tried multiple versions of VPN Client ( to latest one With all the versions the setup finish and reboot without any issue.

    Problem is that I cannot get it to connect, it just timeout reaching the VPN concentrator. Error message is 412 the remote peer is no longer responding. I've tried also creating ad hoc windows firewall rules disabling it at all and still have the same issue.

    Googling the error return issues with the remote peer but anytime I'm able to connect from an XP pc so it is not the case.

    I've also tried following the initial guide (deleting ndis.sys and installing Citrix DNE) with no luck.

    Anyone hit this issue too? anyone solved it?


  • shame on me... changing transport from UDP to TCP solved the issue!

  • Very nice solution. Worked first time and can connect fine aterwards. Used W7 RC (7100) and Cisco client

    Many thanks,

  • I guess there's no hope for installing in Windows 7 Professional 64bit (Final version)?

  • Installed Cisco VPN Client after installing Citrix DNE Update (32 bit) on Windows 7 Ultimate RTM and it works fine. Connected to office server no problems. Thanks for the help!

  • JoshP's steps work for me 100%. I am now able to connect to our corporate network. Very simple and clear instruction. Thanks.

  • Wow, I'm quite impressed! It worked perfectly with version for me. Many thanks!

  • Running windows 7 enterprise release.

    After installing the DNE update, i just installed the latest version & it worked fine.

  • I followed the instructions for 64-bit as listed above, and yes the VPN client works...but ONLY WITHIN THE VIRTUAL MACHINE.

    How useful is that?!?

    It doesn't seem as though there's a solution for us 64-bit users.

  • I am able to install the Cisco client on Win 7 Ultimate RTM (32-bit) and it works -- however, I am unable to reach any ip addresses outside of my corp intranet. It seems my routing table is corrupted. Any ideas?

  • The Cisco anyconnect 64bit solution ONLY works for ASA apliances. For the PIX ones, one should use the windows xp mode with the cisco vpn client or the Shrewsofts/NCP VPN clients.

  • I was able to install successfully on my win7 RTM VirtualBox guest OS w/o needing to install the Citrix DNE update.

  • Thanks, everything works like written in the first instructions.

    Best wishes from Bavaria (where beer is drunk from 1-litre-glasses)

  • I didn't want to use VM so I tried NCP. It worked great but at $144 for license it was more than I wanted to pay. So I kept looking and found open source client - Shrew. They have 64-bit RC version for Windows 7. Install took less than a min and it imported cisco .pcf config file. I was on the network in couple min! Thanks for saving me $144, I'll donate 10% of that to the Shrew crew.

  • I have installed the Shrew version, ran the Cisco VPN client in XP mode and neither one works. It installs and connects perfectly, but will not access any IP's on my work network. I have just about give up on this. Running Win 7 Enterprise x64.

  • Thanks to JoshP. Following his steps I've upgraded to VPN Client on my IBMX60 running Windows 7. Very smooth, no issues whatsoever.

  • Were can I download Cisco VPN client

  • The Shrew RC-4 works perfectly on 64bit win 7.

  • Guys,

    i got the following error: "Error 28011: Windows 64-bit is not support by Cisco System ... "

    but once it failed i tried Cisco VPN Client and everything went fine withpout problems.

    also i have read RN and it is supported on Windows 7.


  • I cannot thank you enough. I was about to pack this up and take it back to Wally World. And then i would have bought a Mac Book.

  • God bless you!! I fought with this thing for too long trying to install it. It used to work, then it wouldn't, then it would again. Numerous attempts to uninstall, then reinstall all failed.

    Thank you, thank you so much!! I couldn't be more grateful.

  • I just installed with no problems. I have not tested it yet but the install went great. Thanks

    Just install the DNE and then the client

  • Mohammad!
    How did you let it work?
    I have as well windows 7 64 bit, installed the DNE and afterwards tried to install Cisco VPN Client Still I'm getting the same error: "Error 28011: Windows 64-bit is not support by Cisco System ... "

    Anyone can help me?

  • Installed using Shrew Soft VPN and it works perfectly.

  • Cisco dosen't make a 64bit VPN client

  • Is Cisco AnyConnect VPN Client the same thing only with Win7 64-bit support?

  • No, AnyConnect needs to be supported by your router/firewall :(

  • Shrew Soft VPN for the win! Rather than jump through the XP-mode hoops for Win7 64bit, I installed the latest Shrew Soft VPN, 2.15, imported my Cisco PCF configuration file and connected ASAP!

    I had previously uninstalled Cisco, ran DNE, removed the NDIS files and rebooted before doing this.

    Note about removing the NDIS files. Windows wouldn't let me even as an Admin. So I downloaded TakeOwnership, installed the registry tweak, and performed Take Ownership. I was then able to rename the files (.bak) so Windows could re-install them on reboot. Worked great!

  • The website information is fantastic and I can't thank you guys enough for this bit of info!! To heck with all the above BS in trying to get Cisco VPN installed, Shrew's VPN connection is perfect for the Windows 7 64 bit environment and I couldn't be more pleased. So stop the insanity and go with this free-bee, it works great!

  • i found that if using wireless broadband connection to internet the vpn doesn't works in win7 (only vpn login sucess then all traffic fall in deny) but wifi and others ok. any idea?

  • Does this work on Windows 7 64 bit?

  • Hi, How do I know which Windows 7 I have got as per when you refer Windows 7100 etc. Reason is I bought a notebook with Windows 7 Home Premium and am now also on the mission for VPN client for it. I have the version of VPN client which is compatible for Vista, this should work if I change to compatibility mode Vista SP2?

  • I am not having any luck with the Cisco client.

    I am running Windows 7 under a VMWare Session on Mac OS 10.5. Up to recently, I was using the Mac VPN client and bridging the connection to the VM running XP. However, I created a new VM with Windows 7 and since then, whenever the Mac VPN client is launched ALL network connectivity for the VM is severed.

    I was hoping that I could install the VPN client under W7 on the VM and connect to the VPN that way. However, no workie. It installs fine, no BSOD, and it tries to connect but times-out. All other network connectivity on the VM seems to be working fine. (I followed the steps enumerated at the beginning of this thread when I installed under W7. It seemed to work.)

  • I thought I would kick-off parallel processing by posting my last message while continuing on with installing Shrew and testing that.  It works PERFECTLY in the configuration I mentioned:

    -Mac OS 10.5

    -VMWare Fusion 3.0.0 [using Bridged (Autodetect) for network settings]

    -Windows 7

    -Imported PCF file from company

    This is great!

  • Sweet work dude, worked well for me first time! I took all the credit of course :-), they think I am a God : L O L :

  • I installed the shrew vpn solution on my new laptop with Windows 7 64 bit. It works great. I know nothing about a vpn or how it works because my IT folks always set it up for me. I found the pcf file on the work laptop and copied over, installed the shrew solution, imported the pcf and off I went. I can now connect to my office via remote desktop and not have to switch computers... great product.. even better that it is free.

  • I have tried different versions (release, beta-stable and alpha) of Shrew VPN. It has worked for me in the past on x64 Vista but recently has stopped working and also does not work on Win 7 x64. I do get a message that the tunnel is started and connected but then very shortly I get the message : ...the session is being terminated by the gateway...
    My guess is some minor changes in tcpip security in either the O/S hotfixes or VPN security hotfixes on the corporate router side may account for this. Hoping to get something working w/ XP compatibility mode under Win 7 x64 w/ the Cisco 5.0 client....

  • how to make it wokr on 64 bit OS on windows 7?

  • I tried installing VPN Client 5.0.5, using above mentioned steps and getting error 1721 (Error Desc: Installing the VPN Client on a 64-bit Vista Machine Results in a 1721 Error ). Could someone pls. help me installing VPN Client successfully.

  • Very easy..check those link below

  • Hi,

    Gosh, Cisco VPN cliet didn't work.

    Below log_cisco error:

    Can you help me ?

    Cisco Systems VPN Client Version

    Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.

    Client Type(s): Windows, WinNT

    Running on: 6.1.7600

    Config file directory: C:\Program Files\Cisco Systems\VPN Client\

    1      16:24:43.712  02/22/10  Sev=Warning/2 IKE/0xA3000067

    Received an IPC message during invalid state (IKE_MAIN:507)

    2      16:25:02.334  02/22/10  Sev=Warning/2 CVPND/0xA3400015

    Error with call to IpHlpApi.DLL: unable CreateUnicastIpAddressEntry, error 0

    3      16:25:17.374  02/22/10  Sev=Warning/2 CVPND/0xE3400013

    AddRoute failed to add a route: code 160





    4      16:25:17.374  02/22/10  Sev=Warning/2 CM/0xA3100024

    Unable to add route. Network: ae268ff, Netmask: ffffffff, Interface: ae2355d, Gateway: ae23401.

    5      16:25:17.374  02/22/10  Sev=Warning/2 CVPND/0xE3400013

    AddRoute failed to add a route: code 5010





    6      16:25:17.374  02/22/10  Sev=Warning/2 CM/0xA3100024

    Unable to add route. Network: 0, Netmask: 0, Interface: ae2355d, Gateway: ae23401.

  • I installed the Cisco VPN Client version on my Windows 7 Ultimate, however, can only use the VPN only once because after restarting the computer, I get an error saying: Failed to read description, error code 2, and some service the list of services. When I start the Cisco VPN again, says the service was not started and asks to start manually, but the service does not exist in the list disappeared.

  • I really need help. I have just upgraded to Windows 7 and still cant get it right. Please help.

  • Shrew Soft - +1 Works perfect on WIN7 64bit.

  • i followed the steps to install cisco vpn client and sucessfully connection vpn with wired or wifi internet connection but using USB mobile broadband or built-in mobile broandband like ericsson F3057g which after logged in VPN sucessfully all traffic pass through is deny...

  • Hello;

    Cisco vpn didn't work via mobile broadband, because DNEupdate.exe didn't install service Deterministic Network Enhancer on this network card, I have the same problem:(

  • so way can do to make it works on mobile broadband connection?

  • so any way to make vpn works on mobile broadband connection?

  • I would like to learn more from _Cepera as how it is possible to use Shrew VPN.

    Here's my configuration:  Window 7 OS, T-Mobile broadband wireless internet connection, Shrew V2.1.5.  I downloaded a vpn client profile from work.  My login attempt failed each time with the same message:

    bring up tunnel...

    network device configured

    tunnel enabled

    gateway is not responding

    tunnel disabled

    detached from key daemon

    Is there any particular setting needed in the profile file?  Thanks in advance!  

  • Forget the Cisco client. Use Shrew Soft. All the way up to windows 7 64-bit clients.
    I had the same problems as you did, driver failure, awful blue screens, etc and now with this Shrew vpn client got no problems at all. No tricks, no re-installs, just works in Win7.

  • Nothing worked for me.

    DNE update installation is ending on error 27850 Unable to manage networking component. Operating system corruption may be preventing installation.

    Tryed winfix.exe with same result.

    Can you help me please.

  • shrewsoft saved the day. windows 7 home premium (so no option to run in xp mode without upgrading os). so easy. they will be getting a donation from me!

  • Hi, I was able to successfully install v5.0.07 on my 32-bit Windows 7 Ultimate machine fine, but cannot seem to successfully connect using the client. I get the following errors in my log file:

    1      17:10:51.504  04/21/10  Sev=Warning/3 IKE/0xE3000057

    The received HASH payload cannot be verified

    2      17:10:51.504  04/21/10  Sev=Warning/2 IKE/0xE300007E

    Hash verification failed... may be configured with invalid group password.

    3      17:10:51.504  04/21/10  Sev=Warning/2 IKE/0xE300009B

    Failed to authenticate peer (Navigator:915)

    4      17:10:51.504  04/21/10  Sev=Warning/2 IKE/0xE30000A7

    Unexpected SW error occurred while processing Aggressive Mode negotiator:(Navigator:2263)

    I've tried disabling windows firewall and my antivirus and didn't have any luck. I was wondering if anyone else has run into this problem and found a solution?



  • Boss...

    Perfect! I have installed this version of VPNClient for W7 x64 and is working normally.

    Thanks so much!!

  • I just downloaded and installed Windows XPMode and Virtual PC from Microsoft, and installed Cicso VPN Client Ver 4.0.5C on the Virtual PC and everything works 100%, no problems. This works for Windows 7 Professional and Ultimate.

  • Hi all,

    I stil can not installed the cisco client.

    I have follow the all procedure.

    still internal error 2738, in windows 7 profesional.

    I have cisco any connect VPN client installed.


  • Just installed Shrew 2.1.5 and imported the cisco cpf file and it worked like a charm!

    Thanks a lot guys for this tip!

  • To fix for windows 7 simply disable the IPv6 from the vpn adapter properties

  • Shrew works for Window 7 x64. AFter testing I'll donate some $$

  • Thanks for posting this solution. I was experiencing the error: 440 Driver Not Found whenever I tried to connect.

    After some trial and error, the procedure at the top of the page did the trick for me using V5.0.04 of the client on 32-bit Windows 7 Pro.. The explicit uninstall, DNE Update, and all of the reboots all seemed to be neccessary. In my case no compatibility mode or NDIS tweaks were needed.


    1.Uninstall the previous version of Cisco VPN client
    3.Download the Citrix DNE Update and install it (or REPAIR if already installed from a previous attempt).
    5.Install the Cisco VPN Client 5.0.04 or later
    8.Rebuild the connection profile (previous one was no longer visible for some reason)

    Many thanks for this.

  • Had same problems like you, but...

    ... you just need "Windows 7 Firewall Control" in "plus"-version by Sphinx-Soft. Sometimes you will get a mark to register, but nothing else is regulated in trial-version.

    Install Cisco VPN and apply the rule "EnableAll" - to get this rule, disable "recommended zones only".

    Sometimes you need to change profile and add: UseLegacyIKEPort=1  

    Works in my case without delete files or something else...

  • This post brings back memories of why I went to Ubuntu.  The built-in VPN client works like a charm; it couldn't be any easier.  The only thing I miss from Windows is Adobe Acrobat Pro.  Otherwise, everything available on Linux meets or exceeds Windows apps.

  • Great! It's a big help for me. Thanks a lot.

  • get error 414 each time I try to connect. check vnp connections states does not have valid IP address. Windows 7 64 bit home premium.

    Installed Cisco VPN Client 5.0.07 version

    still unable to get it to work.

    IT department unable to figure this out. Any help!

  • This was our experience, Cisco VPN client for 64 bit works like a charm when connected to a network (wired or wifi) It does not work (it will authenticate only) when going via mobile broadband (in our case Telstra Australia). After reading this thread i downloaded the latest Shrew VPN client. Imported the Cisco profile file, Connected and Authenticated and all apps worked as they should. 3 cheers for Shrew.

  • I am using Windows 7 64-bit Ultimate version, i tried to install vpn but it shows the problem of compatabilty.Can any one help me out....

  • I am using MAC OS 10.7, VMFusion and I could connect successfully over VPN after enabling Cisco N/w connection. Earlier I was getting a 442 error when it wasn't enabled.

  • Unable to install vpnclient-win-msi- on Windows 7 64 bits

    Getting error:

    error 28011 windows 64-bit is not supported by cisco systems vpn client

    Please, help!

Comments have been disabled for this content.