Junos Pulse keeps on upgrading clients

[RasKal_]

Pulse is a big progress and having it now available for iPhone is just great (without Host checker though).

The big problem I have is that MSI package installation workflow is somewhat broken: even if my SA is configured (under System -> Options) not to upgrade Junos Pulse clients automatically, it does. ItÕs a shame. I want to have Pulse installed by SMS, and the MSI package is doing the job. The only problem is that the TNC Client Plugin is not included in the MSI package: this is triggering the client upgrade even if the appliance is configured not to do so.
I have a JTAC open for this and I hope to see a version where plugins are included in the MSI package if the REALM configuration has (e.g.) Host Checker configuredÉ
Or maybe I am wrong with my configurationÉ Well, I am working with JTAC since September the 14th; I hope they can find somethingÉ

Does anyone here tried to freshly install a Windows laptop with a Pulse package created from a SA?

FYI, my IVE is 7.0R2 (build 16499) and the Pulse component version I loaded on this appliance is 1.0.2.7095, so latest public releases...

Tks and bgrds,

Pascal

[RasKal_]

Providing an update to myself (and the community)...

To avoid TNC Client Plugin "upgrade" even if System -> Options "Enable automatic upgrade of Junos Pulse Clients" is disabled, you'd better create a MSI package with "All components" and not "Minimal components" which only includes Core access components.

Doing so (All components) also includes the WX Acceleration Tab on the Client UI, which is not in use in my shop: it is confusing users and triggers (some... actually, a lot) helpdesk calls.

Another problem I am facing is Windows 7 not able to connect (after user enters its credential, it loops between "Connecting" and "Waiting to connect" although the IVE is reporting the user as connected (an IP has even be allocated from the pool). I opened another JTAC for this...

Anyone else here doing Pulse with Host Checker at Realm Level? Or are you doing compliance at Role level?

IVE 7.0R2 (build 16499)

Junos Pulse 1.0.2.7095

[zanyterp_]

Hi RasKal,

The TNC client plugin will be associated with Host Checker rather than Pulse for the upgrade (or that is my expectation).

As a test for your Windows 7 users, if you disable Host checker, do users connect successfully? What checks are you doing? Do you see anything interesting in the user access or event logs at the time the users attempt to connect with Windows 7? Does the behavior change if users connect from the browser rather than Pulse UI?

[RasKal_]

Hello Zanyterp, Windows7 without Endpoint Security policy configured makes it, of course, as the TNC Plugin is not needed anymore. Thanks for your time and ideas anyway. To give a bit more details now: The TNC client plugin will be associated with Host Checker rather than Pulse for the upgrade (or that is my expectation). What I saw is that, when installed, it is present in the "Pulse - About - version details" product listing; and NOT in the Program Files listing one could get by Control_Panel - Add_remove_Programs. My understanding is that TNC Client Plugin is more HC while Pulse could be compared to NC. Not that important after all... just words. As a test for your Windows 7 users, if you disable Host checker, do users connect successfully? Yes. What checks are you doing? Do you see anything interesting in the user access or event logs at the time the users attempt to connect with Windows 7? I removed HC from the login process. Does the behavior change if users connect from the browser rather than Pulse UI? Remember my post: "my SA is configured (under System -> Options) not to upgrade Junos Pulse clients automatically," We are not allowing users to connect via browsers because we are willing to control the deployment of Pulse: by SMS rather than online installation/upgrade. This is a requirement in my shop... :-(. And you, how are using Pulse? Any issues so far? Best regards.

[Tiju_]

HI All,

I have just started using and testing the pulse on a Windows 7 64 bit systesm, but the Pulse just keeps saying "Wating to connect" and does not connect. \logs in the SA applaicne says "

EAM24460

2010-11-25 12:04:17 - ive - [X.xX.X.X] User1(Authorized Users)[JunosPulse Test] - Session resumed from user agent 'Junos-Pulse/1.0.2.7095 (Windows 7)'

"

I have disabled Host Checker, but still the same ? Any ideas ?

Rgds,

TJ