[2024 Sept Notification] SecuExtender SSL VPN macOS and Windows Clients: EOL and Upgrade Options

Zyxel_JudyH

SecuExtender SSL VPN macOS and Windows Clients: EOL and Upgrade Options

We want to inform you that the SecuExtender SSL VPN macOS and Windows clients have reached their end of life (EOL). Zyxel is no longer selling, maintaining or supporting these products.

However, for those who recently purchased a license, we understand that you may still need access to the software. You can download the software using the archive links below:

• [macOS SecuExtender SSL VPN client 1.2.6]

• [Windows SecuExtender SSL VPN client 4.0.5.0]

Please note that these archive links will be available until December 31, 2024.

Option 1. Use IPSec VPN instead of SSL VPN

IPSec VPN is widely supported across all Zyxel firewalls and endpoint platforms, including macOS, iOS, Windows, and Android. It offers several advantages over SSL VPN:

◉ High Security: IPSec VPN uses multiple encryption and authentication methods, providing strong security and reducing the likelihood of web attacks like cross-site scripting.

◉ High Performance: IPSec VPN often outperforms SSL VPN depending on application and connection conditions.

◉ Network Layer Encryption: Encrypts at the network layer, making it transparent to applications. However, it requires higher technical knowledge to set up and manage IPSec VPN across the board. In Zyxel, we aimed to simplify the process of provisioning IPSec VPN client with a remote VPN wizard (on-prem mode) or using Nebula to generate VPN scripts in just a few clicks.

Alternatively, if you prefer to use free, built-in VPN clients, you can generate VPN scripts via Zyxel's VPN wizard or Nebula’s portal. These scripts are compatible with multiple platforms, including macOS, iOS, Windows, and Android (StrongSwan).

Resources

Watch our video demonstration on using Nebula to provision the new SecuExtender Zero Trust IPSec/SSL VPN Client:

https://www.youtube.com/watch?v=2zs60KNaVPw

Check out our Zyxel community knowledge base article on how to generate a VPN script for the macOS built-in VPN client. We’ve also completed FAQs to help guide you on using the Sonoma Native VPN client to set up an IKEv2 VPN with your uOS/ZLD on-premise, Nebula firewall, or USG LITE 60AX. You can find the details in the links below:

◉ Why can't I establish a VPN connection after updating to macOS Sonoma? How can I resolve this issue?

If you are a uOS or ZLD on-premise user, check this out: Link

◉ How to establish a VPN connection with a Nebula firewall using the macOS Sonoma native VPN client?

If you are a Nebula firewall user, this guide is for you: Link

◉ How to establish a VPN connection with the USG Lite 60 AX using the macOS Sonoma native VPN client?

If you are a USG LITE 60AX user, take a look here: Link

Feel free to explore these resources!

Option 2. Upgrade to USG FLEX H firewall to continue using SSL VPN

In rare conditions, you may encounter firewall penetration issues when using IPSec VPN. SSL VPN uses HTTPS traffic, making it easier to penetrate firewalls and proxies. For further enhanced protection and comprehensive service features, consider upgrading to a USG FLEX H firewall that supports both IPSec and SSL VPN (OpenVPN). The latest generation solutions offer robust security measures and advanced capabilities to meet your evolving needs. Zyxel's new SecuExtender Zero Trust IPSec/SSL VPN Client supports both IPSec and SSL VPN protocol, plus advanced features: bandwidth throttling, easy provisioning, and tunnel redundancy.

👉️ Try Zyxel's new SecuExtender Zero Trust IPSec/SSL VPN Client for free!

Download the software (30 days free trial included):

macOS version

Windows version

Last but not least, you can use a free OpenVPN client to connect to the USG FLEX H firewall.