You have questions - NCP provides answers

We've compiled a selection of answers on the start-up and use of NCP products so we can solve frequently asked questions (FAQs) quickly.

IPsec VPN clients

Which client software does NCP offer?

NCP offers Secure Entry clients and Secure Enterprise clients for universal access to central data networks. Both support all security technologies (VPN, PKI) and use the same communications and security standards. The latter can be administered centrally and can be bundled with the NCP Endpoint Security concept.

Which operating systems and end devices does NCP Secure Windows Mobile Client support?

All current Windows CE variants and Windows Mobile 5/6. All supported operating systems can be found here.

Does the NCP Secure Client support Symbian^3?

 NCP currently offers a VPN client for S60 3rd edition. 
 Owing to the current situation - liquidation of the Symbian foundation, withdrawal of large suppliers like Samsung and Sony Ericsson - NCP still reviews its support of the new operating system Symbian^3. NCP closely monitors the respective market and reserves the right to act according to the demands of the market. 

Will Android based devices be supported by the NCP SSL VPN solution?

Yes

Is there an NCP Secure Client for Android?

The recently announce Android 4.0 "Ice Cream Sandwich" includes a new API for controlling the internal core VPN functionality. NCP will now concentrate on using this interface to develop an NCP Secure Client that provides NCP specific benefits such as:

  • compatibility to the numerous VPN gateways on the market 
  • connection to the NCP Secure Enterprise Management 
  • VPN Path Finder Technology, and 
  • Seamless Roaming. 

Ice Cream Sandwich is due for release in December 2011 and will be available for Smartphones and Tablets. An initial version of the NCP Secure Client based on Android 4.0 "Ice Cream Sandwich" is planned to be available during Q1/2012.

Until now, manufacturer specific restrictions meant that, with current Android based devices (< version 4.0), an NCP Secure Client could not be procured via the normal Android market and then installed on such a device. The NCP Secure Client currently available for Android requires a "rooted" device or, in special cases, a specially tailored Android kernel. 

This latest version of Android software means that with Android systems based on version 4.0 or later, this restriction is now a thing of the past and that the new NCP Secure Clients will be installable in exactly the same way as every other Android-market application. 

For more information please send an Email to android-vpn@ncp-e.com  

 

Does NCP support the VPN Client pre-installed in Android devices?

Yes. Those Android based devices with the works-installed VPN Client can use that VPN Client to establish a VPN Tunnel to NCP Secure Enterprise VPN Server (from version 8.05). The protocol used in such a connection is L2TP over IPsec.

 

Will iOS based devices (Apple iPhone/iPad) be supported by the NCP SSL VPN solution?

Yes

Is an NCP Secure IPsec Client available for Apple iOS (Apple iPhone/iPad)?

As soon as Apple releases documentation about the Mobile Device Management of iOS-based devices, NCP will make available a VPN solution for these devices. 

Does NCP support the VPN Client pre-installed in Apple iOS?

Yes. Apple iOS, from version 3 onwards, includes an IPsec VPN Client which can establish a VPN Tunnel to an NCP Secure Enterprise VPN Server. 

Does the NCP Secure Client support Windows Phone (Windows Mobile 7)?

Currently, NCP offers a VPN Client for Windows Mobile 5/6.x.
NCP plans to support Microsoft's new operating system. Restrictions within this new operating system demand close cooperation with Microsoft, however, NCP has not yet received vital information on this system from Microsoft.

 

Does the NCP secure client also work with VPN gateways from third-parties?

Yes, based on the IPSec standard, incl. all RFC protocol enhancements (XAUTH, IKEConfig, NAT-T). You'll find details in the compatibility list.

 

How to configure the NCP Entry clients with a third party VPN gateway?

You will find different Quick Configuration Guides here. 

Is there a way to easily import client configuration files from other vendors?

Yes, you can automatically import .pcf, .wgx, .spd or .ini files. 

Can I also log in to a domain via GPRS/UMTS using NCP secure clients?

Yes. You'll find details here. 

I'd like to set up a (really) secure VPN connection without being at the mercy of the Internet or public WLAN. Is that possible with the secure client from NCP?

Yes. NCP secure clients have an integrated, dynamic personal firewall and support FND (Friendly Net Detection). Find out more here. 

How do I get the latest version of NCP secure clients?

Easy. Go to the NCP Download Area. 

How do I update my NCP Software?

Updates: 
Updates can be free-of-charge or they must be purchased. This depends on whether the new software has signifi-cant new features: 

- Updates are free of charge if a new minor release is introduced on the market 

- Updates must be purchased if a new major release is introduced on the market 

Major Release 

Major releases contain significant changes; i.e. extensions in performance and function that are not error correc-tions. 
Must be purchased: New license key 
Example: 9.10 update to 9.20, or 9.12 update to 9.20 

Minor Release

 Minor releases contain error corrections and minor improvements. 
No-charge: No new license key (LK) is required 
Example: e.g. 9.22 update to 9.23

Note: 
If a new version is used with the existing LK, then only the bug fixes can be used, the new "significant changes", cannot be used. Purchase of a new LK is necessary for this. 
Two methods are possible: 

  1. The new LK is assigned as part of an Update Service Contract that must be purchased
  2. Individual order of the new LK at NCP (compliance with the charged version jumps)

Important note: There is no duty for Updates

Where can I find the information of the current version I use?

You can find the information at the Client Monitor. Click on "Help" at the menu bar and choose "Info". 

What are the differences between NCP Secure Entry Client, NCP Secure Enterprise Client and NCP Secure Client - Juniper Edition?

All clients have a similar range of features, but the NCP Secure Enterprise Client can also be administered centrally. You'll find a features' comparison here. 

Do I need a personal firewall at my tele-workplace as well as the NCP secure client?

No. All VPN clients from NCP have an integrated personal firewall which can also be administered centrally in the case of the Secure Enterprise client. 

Can I save my company logo or a project logo to the Client Monitor and if so, how?

Both Secure Enterprise (Win32/64) as well as the Secure Entry Client (Win32/64) offer the option to save your company logo in a dedicated monitor field.

An additional information field is displayed as standard in the Secure Entry Client monitor. This can be replaced or removed. An HTML file, saved in the local installation directory, is displayed in the web browser after a mouse click on this field. You can find all the information about saving your company or project logo.

You'll find details in the PDF "NCP Entry Client Monitor"
(The links may only be opened within the manual.)

The file "Projectlogo.ini" is saved to the installation directory when installing the Secure Enterprise Client. This file includes, amongst other things, the installation instructions on how to integrate a company or project logo into the Client's user interface.

For more details please refer to your manual, chapter "Secure-Client-Monitor-e.pdf" on pages 8 and 9.
You'll find details in the PDF "NCP Enterprise Client Monitor"
 (The links may only be opened within the manual.)

Does the Entry client recognize friendly networks and choose different firewall settings automatically?

Yes, you'll find details in the PDF "Entry Client Firewall and FND"
(The links may only be opened within the manual.) 

How does the NCP client provide secure Hotspot logon?

Yes, you'll find details in the PDF "Entry Client Mobile Computing"
(The links may only be opened within the manual.)

Does the NCP solution address the issue of overlapping IP networks?

Yes. 

Is there a possibility to lock the settings for VPN, Internet Access and Personal Firewall in order to prevent users from misconfiguration?

Yes.
You'll find details about the NCP Secure Entry Client in the PDF "Entry Client Monitor"
(The links may only be opened within the manual.)

 
You'll find details about the NCP Secure Enterprise Client in the PDF "Enterprise Client Monitor"
 (The links may only be opened within the manual.) 

What happens if you unplug an external certificate storage device (e.g. smartcard, USB flash drive, SD card)? 

The VPN connection is immediately and automatically disconnected if the default setting is still in place. If the VPN connection is to remain, you can configure this specifically. 

Do NCP's Secure Clients support WWAN Hardware (Wi-Fi, 3G) with NDIS 6.2 driver for Windows 7 (e.g. Sierra Wireless, Huawei, Option)?

Yes, they do. The architecture of NCP's Secure Clients allows for a smooth VPN connection. 

Is it possible to transfer an existing NCP configuration to a newly installed NCP VPN client?

If you already use a NCP VPN client and need to install the client software on a new end device, you can easily transfer your client settings. In order to do so, you only need to copy the file "ncpphone.cfg", which contains all settings of the NCP client. You can find this file when you follow the paths listed below (Link/PDF of the listed paths): 

                                      

 Windows XP 32bit: 
 \program files\ncp\secureclient 

 

 Windows Vista / 7 32bit:
 \program files\ncp\secureclient 

 Windows Vista / 7 64bit:
 \program files (x86)\ncp\secureclient 

 

 Mac: 
 /Library/Application Support/NCP/Secure Client/ 

 Windows mobile (Configuration PC Windows XP) 
  Enterprise Client:
 \Documents and Settings\<user>\Application Data \NCP\Enterprise Configuration Manager CE\bin\ 
 
 Entry Client 
 \Documents and Settings\<user>\Application Data \NCP\Entry Configuration Manager CE\bin\ 

 Windows mobile (Configuration PC Windows Vista / 7) 
  Enterprise Client 
 \Users\<user>\AppData\Roaming \Ncp\Enterprise Configuration Manager CE\bin\ 
 
 Entry Client 
 \Users\<user>\AppData\Roaming \Ncp\Entry Configuration Manager CE\bin\ 

 Windows Symbian (Configuration PC Windows XP) 
  Enterprise Client 
 \Documents and Settings\<user>\Application Data \NCP\Enterprise Configuration Manager Symbian\bin\ 
 
  Entry Client
 \Documents and Settings\<user>\Application Data \NCP\Entry Configuration Manager Symbian\bin\

 Windows Symbian (Configuration PC Windows Vista / 7) 
 Enterprise Client 
 \Users\<user>\AppData\Roaming \Ncp\Enterprise Configuration Manager Symbian\bin\ 
 
 Entry Client 
 \Users\<user>\AppData\Roaming \Ncp\Entry Configuration Manager Symbian\bin\

 

Software activation

What is involved in software activation?

In order to use your client software, you need a serial number and a license key. Client software license keys have a unique version number. The features of the client software are determined exclusively by the license key. The client license is released by the activation code sent via the Internet to every end device. 

For which software versions is software activation needed?

Secure Entry Client (Win32/64), Version 8.3+
Secure Entry CE Client, Version 2.3+ 

Which NCP products are involved?

NCP secure Entry Client (Win 32/64), NCP Secure Entry Windows Mobile Client. 

When should software activation be carried out?

  • For new installations of NCP secure entry clients
  • For major changes to the hardware of the end device used
  • For purchased software license updates (new license key)
     
     

Possible causes for software activation failure

  • The license key is larger than the installed software version
    Solution: Software update
  • Transfer errors
    Solution: Retry or contact Support
     
     

You cannot use all features of the software

Cause: The license key is older than the installed software version.
Solution: Software update with assignment of new license key. 

What information does software activation look for?

Hardware information only - no user data (no SW registration!) 

How can you activate the software?

  • Online, i.e. the end device has a direct Internet connection
  • Offline, i.e. the end device does not have an Internet connection

How does online software activation work?

NCP software activation online

How does offline activation work?

NCP software activation offline 

When do I have to pay for a software update?

Whenever a new version (or major release) is involved. New service releases can be downloaded free of charge.

Examples: Version 8.3, 8.4, 8.5, etc. Service releases 8.31, 8.32, etc. 

Will an update always bring me up to the latest version?

Every update can handle 2 version changes. After that, you will need an additional update. 

How do I get the client software?

Current software versions and service releases can be downloaded 
 

How can I reuse my license key when the hardware has been replaced (upgrade / faulty)?

“Grace Activation” is included exactly for situations like this, i.e. a second activation per license is possible by default. Further activations can be requested via NCP´s online support form. Please explain the reason for the additional activation in the plain text field (“problem description“). 
 
 

How can I reuse my license key when a user has left the company and the license key is to be transferred back into the pool of licenses to be reused on another device at a later time?

 If the device/hardware remains the same, even if the device has to be reinstalled (with the same operating system, however), new activation is not required. However, the license key has to be entered again. In all other cases, please refer to the description above (=> go to our online support form).
 
 

Is there a limit on the number of times a license key can be reactivated?

 Yes, it is limited on 2 (one of them being the “grace activation” as explained above)