Easiest way to setup groups of user for using Junos Pulse or Network Connect?

[pctx_]

Hey all,

So I'm currently trying to setup (in the easiest way possible) how to have one User Auth. Realm but have different policies for different users as we have some people in our environment that have Mac or Linux that need NC instead of Pulse.

In doing so, our setup consists of LDAP authentication w/ primaryGroupID's -> assign role Users.

Here's where I'm coming up short.

I've got:

username is: xxxx, xxxx,xxx -> Assign role Users -> Rule name: Junos Pulse users.

I also have username is: xxxx,xxxx,xxx -> Role Network Connect Users -> Rule name NC Group

I have taken my username and the other user who I'm doing the testing for out of the Junos Pulse Rule set but when I still sign into our VPN page, I only get Junos Pulse as the client software.

I'm reading through the MAG manual right now but I'm wondering if someone has some pointers.

Thanks!

-Aaron

[pctx_]

Well,

I just figured it out. Simply checking the bubble that states:

"When more than one role is assign to a user:

User must select from among assigned roles" and that allowed me to navigate and install NC. Sorry for the trouble.

[zanyterp_]

Another option would be to use browser restrictions on the role to give only the appropriate role. (both work successfully; but depending on how much/little you want your users to need to click something, browser restrictions are a good solution).