Older versions of TouchVPN will stop supporting IPsec starting Feb 15 2020

Existing versions of TouchVPN will no longer support IPsec IKE v1 also know as IPSec in the client.  According to Cisco in a security advisory, “The vulnerability exists because the affected software responds incorrectly to decryption failures. An attacker could exploit this vulnerability sending crafted ciphertexts to a device configured with IKEv1 that uses RSA-encrypted nonces.”

So we will support IPsec IKE v2 in the client. But this requires customers to upgrade.  Until they upgrade they can always use the Hydra protocol.