Host checker issues after upgrading to 7.1R4

[JusttryIt_]

For the most part everyone can connect fine. However there are some people that are on XP not Win 7 that when they attempt to go the the site to log into VPN it hangs on Host Checker. It stalls on on "Loading Network Components for Host Checker", I have had them try to remove all juniper items from Add/Remove programs and try to download fresh Juniper items and they still get the error as stated above. I just tried to send them the Host Check application (StandAloneHttpNarInstall) and just waiting to hear back if that worked. Has anyone seen this with this or previous releases?

[NULL_]

Hi JusttryIT,

the 7.1R4 seems to me a little bit buggy. First over all I could not upgrade from 7.1R3 to 7.1R4 ... "aka Service package not valid", JTAC did recommend to downgrade to 7.1R1.1 and then Upgrade again. Did this (in an test environment) and it passed. But after upgrade I could not start any applications which belong to some sort of an Start Button (Start Pulse / Start Java RDP) problem did only exist in Firefox, Microsoft Internet Explorer does work properly...

Regarding your question (extract from Release Notes):

13. endpointintegrity-opswat - Host checker always fails an Anti-spyware check for Microsoft Security Essentials. (605368) _

So if your using Microsoft Security Essentials potentially there you have the reason.

@Juniper: your release notes are totally screwed up (Ugly and not structured, have a look at OLD ScreenOS Release Notes).... No mention of Security Bug fixes!

1 Day after the release of 7.1R4 the Security Advisories get published, which do recommend for one Security Hole an upgrade to the latest platform release (7.1R4)...... (Release Note still not updated yet...)

regards

NULL

[gwellman_]

I had the same problem, but so far on Windows 7 systems. Host checker would never go green and people's options would then be limited. I am rolling back. buggy release.

[zanyterp_]

@NULL: yes, you are correct, the release notes do not contain any notes of security fixes. these are noted ONLY in the security notices and do not show in the release notes. did you create a case for the start button failure? i am not aware of this being reported (or duplicated in-house).

@justtryit: are the users admin users? if not, do you have the juniper installer service installed & running in the admin context for your users? did any of the users click on "no" at the intstallation prompt from IE or the security warning to launch the software from the IVE?

[JusttryIt_]

*

*Update**

gwellman...try this fix below.

It looks as if is an issue for anyone else in the community you need to send them the Host Checker app seperately and not let the site keep prompting for download of the app. I sent the host checker application to those who were having an issue and they are working ok.

[gwellman_]

Thank you for the recommendation..but..Sending the host checker app for ~100 users is not an easy thing.. is this the only solution?

[NULL_]

Dear zanyterp,

did again a few test's on the demo/test box.

So it seems I have now only 1 problem:

RDP in Internet Explorer 9.08112.16421 does work like a charm.

RDP on Firefox 6.0.2, clicking on the Start button, java screen does open but picture of the remote computer won't be presented.

No I won't open a case on JTAC, or are you going to pay me or my Boss? (Most Juniper Products which I do work with SRX/NSM/SSLVPN are at the moment hardly broken....)

Also a lot of those "engineers" @JTAC don't escalate there incidents and or don't understand the problem and the whole case goes in the wrong direction. Also they tend to write the Closing message as nice as possible, and even with false information's in it.... Don't know what's wrong with you guys... Probably a few customer / colleagues and so on should write to http://www.asponline.com/ so you won't get another top rating....

I'll hope Juniper Networks does understand the feedback of those few people who are speaking to them on this forum, because feedback on bad behavior and or bad products is good feedback so you can work on it (if you like to...).

Regards

NULL

[zanyterp_]

hi NULL,

I am sorry to hear about your bad experiences with JTAC; I understand your concerns with what you have said. I have not heard of many issues like you have said, (un)fortunately. I agree that it is unacceptable for misleading/wrong information to be set.

I will try to find a machine that I can upgrade to Firefox 6 for testing.

[JusttryIt_]

gwellman -

I have sent this to 15 people who are having issues ranging from the host checker log in screen hanging to those that are getting a message saying "You computer does not meet the security requirements" error and all of them are now workinhg ok. IF there is a backend fix i could not say but the application is 2mb in size so maybe an email blast of 25 users at a time may be beneficial. Or possibly put it on a share and instrcut your user base to go to the share and install the file. An important thing i found that you need to do is remove all Juniper items from Add/Remove programs then run the Host checker app.

[JusttryIt_]

@Null

RDP via SSL VPN on IE 9 is buggy. It works but it takes longer to load the interactive session than in prior versions of Juniper.