VpnCilla 3.8.4

Reviewer’s Note: This VPN client exclusively supports the outdated IKEv1 variant of IPSec. For security reasons, it is advised not to utilize this application if your VPN server offers more current protocols such as WireGuard or IKEv2-based IPSec.

Before making a purchase, it is recommended to test the free version, "VpnCilla (Trial)," which is also available in the Google Play Store.

VpnCilla serves as a VPN client compatible with servers like FritzBox, Cisco PIX/ASA, Fortigate, and other VPN servers utilizing IPSec Pre-shared Keying (Xauth IKE/PSK).

Key Features:

• Profile settings are automatically imported from the trial version (ensure the trial version remains installed until the first run of the full version).
• No root access is required if your device meets the Android 4 specifications.
• Compatibility with various VPN servers including Fritzbox, Cisco PIX/ASA, and Fortigate.
• Simple connection and disconnection with a single click through a Shortcut Widget.
• Automatic reconnect mode during WiFi or mobile data outages.
• Support for multiple profiles.
• Feature for automatic Cisco Split Routing.
• Password storage options available within profiles or manual entry during connection (the latter being more secure).

Advanced Settings:

• Option to create WiFi blacklists/whitelists to explicitly allow or deny VPN use on specific WiFi networks.
• Ability to define manual routes and DNS servers among other settings.

Restrictions:

• Caution is advised regarding the security risk of storing passwords in profiles, especially if the device is compromised or stolen.
• VpnCilla functions solely if the TUN driver (tun.ko) and the Android 4 VPN routing infrastructure are included in the firmware. It should be noted that not all device manufacturers may have implemented this feature. Testing with "VpnCilla (Trial)" is essential.
• Only IKE/PSK Xauth authentication is supported; other protocols such as PPTP, L2TP, Hybrid RSA, SSL, and Cisco AnyConnect are not available.
• The application supports IPv4 exclusively (no IPv6).
• Works with WLAN/WiFi as well as mobile data up to 3G; however, VpnCilla may exhibit instability over 4G (LTE) with certain devices or mobile providers.
• Active screen filter applications such as Twilight or Lux may interfere with the selection of security dialog checkboxes.
• VpnCilla does not manage phase 1 rekeying initiated by the VPN server effectively. On Fritzboxes, this occurs after one hour of connection, while on Cisco servers it can be configured, typically defaulting to eight hours. A stall of approximately 2-3 minutes in connectivity can be expected until VpnCilla initiates a reconnect.