Zyxel SecuExtender SSL VPN Client [macOS and Windows] - Upgrade Options for EOL SecuExtender SSL VPN Client

We want to inform you that the SecuExtender SSL VPN macOS and Windows clients have reached their end of life (EOL). Zyxel is no longer selling, maintaining or supporting these products.

However, for those who recently purchased a license, we understand that you may still need access to the software. You can download the software using the archive links below:

• [macOS SecuExtender SSL VPN client 1.2.6]
• [Windows SecuExtender SSL VPN client 4.0.5.0]

Please note that these archive links will be available until December 31, 2024.
 

Option 1. Use IPSec VPN instead of SSL VPN

IPSec VPN is widely supported across all Zyxel firewalls and endpoint platforms, including macOS, iOS, Windows, and Android. It offers several advantages over SSL VPN:

• High Security: IPSec VPN uses multiple encryption and authentication methods, providing strong security and reducing the likelihood of web attacks like cross-site scripting.
• High Performance: IPSec VPN often outperforms SSL VPN, depending on application and connection conditions.
• Network Layer Encryption: Encrypts at the network layer, making it transparent to applications. However, setting up and managing IPSec VPN requires higher technical knowledge. In Zyxel, we aimed to simplify the process of provisioning an IPSec VPN client with a remote VPN wizard (on-prem mode) or using Nebula to generate VPN scripts in just a few clicks.

Alternatively, if you prefer to use free, built-in VPN clients, you can generate VPN scripts via Zyxel's VPN wizard or Nebula’s portal. These scripts are compatible with multiple platforms, including macOS, iOS, Windows, and Android (StrongSwan).

Resources

Watch our video demonstration on using Nebula to provision the new SecuExtender Zero Trust IPSec Client:

Check out our Zyxel community knowledge base article on how to generate a VPN script for a built-in VPN client. We’ve also completed FAQs to help guide you on using the macOS Sonoma Native VPN client to set up an IKEv2 VPN with your uOS/ZLD on-premise, Nebula firewall, or USG LITE 60AX. You can find the details in the links below:
 

How to set up a client IKEv2 IPsec VPN ?

 

If you are a ZLD on-premise user, check this out: Link

If you are a Nebula Firewall user, this guide is for you: Link

Why can't I establish a VPN connection after updating to macOS Sonoma? How can I resolve this issue?

If you are a uOS or ZLD on-premise user, check this out: Link

How to establish a VPN connection with a Nebula firewall using the macOS Sonoma native VPN client?

If you are a Nebula firewall user, this guide is for you: Link

How can a VPN connection with the USG Lite 60 AX be established using the macOS Sonoma native VPN client?

If you are a USG LITE 60AX user, take a look here: Link

Feel free to explore these resources!

Option 2. Upgrade to USG FLEX H firewall to continue using SSL VPN

You may encounter firewall penetration issues when using IPSec VPN in rare conditions. SSL VPN uses HTTPS traffic, making it easier to penetrate firewalls and proxies. For further enhanced protection and comprehensive service features, consider upgrading to a USG FLEX H firewall that supports both IPSec and SSL VPN (OpenVPN). The latest generation solutions offer robust security measures and advanced capabilities to meet your evolving needs. Zyxel's new SecuExtender Zero Trust IPSec/SSL VPN Client supports both IPSec and SSL VPN protocol, plus advanced features: bandwidth throttling, easy provisioning, and tunnel redundancy.

Try Zyxel's new SecuExtender Zero Trust IPSec/SSL VPN Client for free!

Download the software (30 days free trial included):

macOS version

Windows version

Last but not least, you can use a free OpenVPN client to connect to the USG FLEX H firewall.

If the suggested options do not meet your requirements and you need to use a legacy SSL VPN Client, please contact our technical support team. We will investigate the possibility of providing a legacy SSL VPN Client for your specific case.