Java vulnerabilities and SSL VPN

[VincentM_]

Hi,

Day after days, Java seems less secure:

Last Year, Java plug-in older than 1.6.0_31 and 1.7.0_2 were automatically blocked by browser (https://addons.mozilla.org/firefox/blocked/p80)

Today, It's the turn of Java 1.7.0_10 to be desactivated (http://www.kb.cert.org/vuls/id/625617), and, no patched version is available...

These issues disable some major SSL VPN feature (JSAM, Network Connect, Meeting...). What can do Juniper to stop using Java for all these features?

Regards,

Vincent

[zanyterp_]

Network Connect: use the installed application only.
JSAM by nature must use Java.
Meeting: enable collaboration on the Pulse config & launch through the Pulse tray
Beyond those, I'm not sure what options are available; this would be a good thing to bring up to your sales team to send to the product team for discussion & response

[michael.saw_]

Is there report or document on Juniper SSL VPN vulnerability assessment and penetration testing?