Skip to main content
ipranger
New Member
May 17, 2021
Solved

Searching for an alternate vpn/ipsec client for Android

  • May 17, 2021
  • 4 replies
  • 8022 views

Hello all, 

 

i'am searching for an alternate vpn/ipsec client for Android that has als an encryption higher the AES128/SHA1. 

There are many on the market, can you recommend one that works well with IPSEC?

I already had the native Android client running a few weeks ago. I can't tell you the level of encryption, you can't set anything on the client. I had only been able to get L2TP to work. Unfortunately, surfing via the VPN was not possible via the Fortigate when the VPN was active. Unfortunately, the support team did not find a solution either.

 

Can anyone recommend a client for me? If possible OpenSource.

 

Very Thanks and Best Regards

Fireon

    Best answer by emnoc

    Strongswan Android client. It's simple to use and should have sha2 families support. Are you doing IKEv2?

     

     

    Ken Felix

    4 replies

    emnoc
    emnocAnswer
    New Member
    May 17, 2021

    Strongswan Android client. It's simple to use and should have sha2 families support. Are you doing IKEv2?

     

     

    Ken Felix

    ipranger
    iprangerAuthor
    New Member
    May 18, 2021

    I installed strongswan this day. It will probably take some work to set it up properly. You might want to post a config example of your VPN.

     

    > Are you doing IKEv2?

    Not yet. Because it does not work with the Fortinet Android VPN Client.

    emnoc
    New Member
    May 18, 2021

    I put this post together a few years back. It should be very simple to follow 

     

     http://socpuppet.blogspot.com/2018/06/fortios-and-eap-identity-vpn.html

     

    I had a client that want to do it awhile back and with enforcing  ikev2  so they deployed IKEv2 thru out the org. Another vpn client that's worth it's money that I should mention is NCP.

     

      http://socpuppet.blogspot.com/2018/06/ncp-vpnclient-ikev2-with-fortios-v60.html

     

    They are based in EU but easy folks to work with. The clients and cfg across all OS that they support is easy to manage fwiw.

     

    YMMV but I personally like the strongswan, but if your in an org that do not honor free or opensource NCP. is the bets thing out in the world. With strongswan you have to know it or rely on open forums but if it is doable or your doing it wrong you can get the correct information or help.

     

    NCP

     

    Just toggle from german to english if the page does not load english site assuming you're an english speaker.

     

      https://www.ncp-e.com/en/service-resources/download-vpn-client/

     

     

     

    Ken Felix

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.