McAfee and Juniper have done it again: SSL-VPN stopped working

[Kees_]

The new McAfee Antivirus Plus is not recognized by Juniper SSL-VPN. I am dead in the water and cannot run VPN and access the corporate network. (same happened in 2012 or 2011).

Anyone know when Juniper will update SSL-VPN so that the new McAfee is recognized as an acceptable product.

(Why don't software companies talk to each other? The McAfee is pretty beligerant stating it was Juniper's problem).

[SF_Dan_]

Thanks, Kita.

[SF_Dan_]

Was the enhancement in the ESAP or does it require an OS upgrade on the SA box?

ya, the 6 months thing was bad... what is really bad is this is the second time in the last couple years there was a problem with the McAfee software and host checker. I understand it was OPSWAT and not Juniper but I would think they could put more pressure on them for a faster resolution.

[Kita_]

I have forwarded your feedback internally to JTAC management as we are working on improving the process and procedures between Juniper and OPSWAT.  

[scoutt_]

Well, ESAP 2.3.9 finally has the fix for the McAfee issue. There has also been an enhancment so that Host checker will run on a user that does not have admin privledges. OPSWAT was looking for an admin, hence the RTP not enabled.

Very unhappy it took 6 months to get a fix, but what are you gonna do.....

[scoutt_]

Enchancement is in the ESAP.

And I totally agree with you, seems like there was no pressure on Junipers end. It took so long that McAfee updated in the mean time so the case was open with 16.1.144 and now I am on 16.1.172, lol.

[zanyterp_]

Looks like this should be supported: http://www.juniper.net/techpubs/software/ive/esap/releasenotes/j-esap-2.3.1-supportedproducts.pdf

If you are not seeing this software pass, please open a case with JTAC with the client side log & screenshot of the version installed

[scoutt_]

I am getting the same, we are running 2.3.1 and I can't get in as McAfee is not supported. I have attached the version of my McAfee. I also want to note that 2.3.1 came out in Dec. 12 2012 while McAfee updated on 1/26/2013

[jayLaiz_]

Hi,

The naming convention might have changed, we do support Mcaffee anti-virus scan 16.x.As per your screenshot, it says McAfee anti-virus 16.x.

Opening a JTAC case would be the bedst approach.

Regards,

Jay

[zanyterp_]

which mcafee products do you have selected in your host checker policy?