3月22日的VpnCilla应用程序分析

Attention: This VPN Client supports only the outdated IKEv1 variant of IPSec!! For security reason YOU SHOULD NOT USE this Protocol resp. this App if your VPN Server supports a more recent VPN protocol as WireGuard or IKEv2 based IPSec. You have been warned! Before you buy this software, please test with the free "VpnCilla (Trial)" (also available at the google play market)! VpnCilla is a VPN Client for VPN Servers as FritzBox, Cisco PIX/ASA, Fortigate or other VPN Servers with IPSec Pre-shared Keying (Xauth IKE/PSK). Features: * Profile automatically taken from the Trial version (don't uninstall the Trial until the first run of this full version) * No root access needed (if the device fully conforms to Android 4) * Compatible with Fritzbox, Cisco PIX/ASA, Fortigate VPN Servers and others (?) * Connects/Disconnects with a single click (by a Shortcut-Widget) * Automatic Reconnect Mode on WiFi/Mobile failover/outage * Supports Multiple Profiles * Supports automatic Cisco Split Routing * Passwords may be stored in profile or always manually entered when connecting (which is much more safe) Advanced Settings: * Possibility to specify WiFi Blacklists/Whitelists to explicitely deny/allow VPN on only specific WiFi ESSDs * Possiblity to specify Manual Routes and/or DNS Server and much more... Restrictions: - Mention the security risk if passwords are stored in profile in case your device will be hacked or stolen! - VpnCilla runs only if the TUN driver (tun.ko) as well as the the Android 4 VPN routing infrastructure is included in the firmware. UNFORTUNATELY NOT ALL DEVICE MANUFACTURER YET HAS INCLUDED IT!! Check with "VpnCilla (Trial)" first! - Only IKE/PSK Xauth authentication is supported (no PPTP, no L2TP, no Hybrid RSA, no SSL, no Cisco AnyConnect, ...) - supports IPv4 only (no IPv6) - supports WLAN/WIFI as well as Mobile Data up to 3g. VpnCilla is unstable over 4g (LTE) on some devices / with mobile providers - Active Screenfilter apps as Twilight or Lux might prevent selecting of the security dialog checkbox - VpnCilla can't handle phase 1 rekeying initiated by the VPN server. On Fritzboxes this will occure after 1h connection time whereas on Cisco VPN servers the rekeying interval is configurable and by default after 8h. Typically the session stalls for 2-3 minutes until VpnCilla initiates a reconnect.