OS 7.2R1 hostchecker with IPAD and Iphones...Hostchecker Failing

[JQ_]

So we have finally arrived with this extensive HostChecker Rules for Apple and Mobile support.

Unfortunately, it doesn't seem to work.

I have an SA 2500 test bed device with 7.2R1 with ESAP Files 2.1.3

On an IPAD I have Junos Pulse 3.0.3 .17311 which is the latest in the Apple Store

I have the same version on my Iphone.

I have create a hostChecker Rule that will check for Rooted Devices, certain user agent strings, IOS version, but it doesn't even get there.

On both devices, it says the Hostchecker is not supported with this version of Junos Pulse Client. Please upgrade the Junos Pluse Client or contact your adminsitrator.

My question is, where is the newer version of Junos Pulse which will work with the new 7.2R1 version?

[JQ_]

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB23185&cat=&actp=LIST

Does anyone know when Pulse 3.2 will be released?

[muttbarker_]

Host checker on mobile devices is done with Mobile Security Suite, not with the SSL HC. You can check for browser string but not use the host check.

[JQ_]

I don't believe that is the case, but thanks for the reply.

I went to a Juniper Seminar and spoke with Rich Campagna. He told me the Mobile Secuirty Suite is the Saas protects the phone with Antivirus, Antispam, Personal Firewall, AntiTheft, Backup & Restore, App monitoring and control and has MDM. You essentially tie in the MAG/SA device with a hostchecker policy to the service to enforce this. This isn't the Hostchecking itself.

I believe the Junos Pulse 3.0.3 doesn't have the updated hostchecking as it was re-written entirely in 7.2R1.

I got a few reps and reached out. If you are right, I will assign your post as the solution. Thanks for getting back to me.

I will let you know what they throw back at me.

[tbehrens_]

Host check for mobile is new with 7.2. It can check for the presence of MDM - can check whether a device is enrolled in MDM - but it's not dependant on the MDM piece.

And yeah, that KB says "Pulse 3.2 required". I'd like to know when that's out, myself. Most likely scenario: Juniper submitted it to Apple and it hasn't cleared the app store yet. That's always been the holdup in the past. Apple takes 2-4 weeks to clear an app.

[muttbarker_]

That shows you what I get for not staying current on reading release notes

Sorry to hand out misinformation and thanks for the update.

[zanyterp_]

The 3.2 versions are in the respective app stores pending approval; unfortunately, there is no way to know when they will be released to the wild. Unofficially we are hoping with the next 1-2 weeks