I tried using the "short" version of the tag with the * before and after but it didn't work. Has anyone else had success?
Running 7.0R3 with latest Junos Pulse from App Store.
I was able to test successfully with *JunosPulseIphone* as a realm restriction
Indeed. That worked perfectly using "*JunosPulseIphone*". Thank you very much!
You are welcome; glad to hear it worked.
It seems that the User-Agent string that is displayed on the IVE admin console is different than what is being sent over the wire. This is why I believe your browser restriction checks were failing. I confirmed this by comparing a SSLDump to what is seen on the admin page. There is actually a second space after JunosPulseiPhone that isn't being displayed on the admin pages..
To find out exactly what the User-Agent string is you will need to do the following:
Navigate to: Maintenance --> troubleshooting --> tools --> TCPDump
Next choose the external interface and then click "Start sniffing" and then have your iOS client log in. Click stop sniffing right away, and then when it loads the next page up on the IVE you will have an option to download the TCPDump. Where it says "Get" change the drop down from raw to SSLDump. This will open up the SSLDump in your browser. Search this log for the string "iPhone" and you should be able to quickly locate the User-Agent string.
Is there an addiional cost for the Pulse client or is it covered under the SA user licensing that you already have? Also do you have to be running SA version 7?
The Pulse for iPhone client is free from iTunes; there is no cost for that.
The ability for users to login from Pulse is included in your user license.
Pulse for Windows requires 7.0; Pulse for iPhone requires IVE OS 6.4 or later and configuration for Network Connect.
Is it possible to get Pulse started automatically after Login via Web or at least that the user is able to start Pulse over the Home-Screen after Login (same as it was previously with network connect where the user has a button to start NC) with an iPad? It surely starts automatically on a windows machine but not on the iPad. So users can only decide between starting pulse in a small "iphone"-sized window where the other bookmarks doesnt make sense to open because of its size or opening a webbrowser in safari to sign in to the IVE the old way but not having a real VPN.
or am I missing something? can I have both (pulse-vpn and ssl-web-session with rewritten bookmarks and stuff) at the same time over the ipad?
I managed to connect iPhone 4 but DNS not working. Any idea?
did you allow udp/53 in the NC ACL and in your firewall?