Quick tips: Troubleshooting HostChecker detection issues

[cbarcellos_]

I thought this might help some users:

First look at the logs:

1. Run a policy trace for a user who has the issue.
2. Check the access log for that user.
3. Check the client side log "debuglog.log".

This should tell you why the user is failing.

ESAP information can be found in the following link: http://www.juniper.net/techpubs/software/ive/esap/

Make sure you are on at least 6.3x code as anything older does not have engineering support (Note: 6.3 will be end of engineering in March 16 2010 per http://www.juniper.net/support/eol/ive.html).

If you find an issue... see this KB: http://kb.pulsesecure.net/KB12905 (Logs required for Juniper Support Case If Host Checker fails to detect a supported Anti-Virus or Firewall product).

Feel free to reply with your techniques as well.

[muttbarker_]

Nice post - maybe you could pin this to the top like some of the firewall troubleshooting posts are pinned.

[cbarcellos_]

Kevin,

Thanks; That's a good idea. I'll work on doing that.

[chaminda_]

This is a good KB12905. You have done an excellent job. It would be nice to inlcude location for MAC and Linux clients

Host Checker stores the log files in the following location on the Macintosh client:

/Library/Logs/Juniper Networks.

Host Checker installs the following log files on Linux systems.

$HOME/.juniper_networks/dsHCLauncher_linux1.log$HOME/.juniper_networks/dsHostChecker_linux1.log

[ozmark_]

To add a note on the Virus Scanner side of it; I find it very handy to check the Virus Update XML for the current

list of sigs - helps when a user says they have the latest and all I have in syslog is the software version.

EndPoint Security -> Virus Signature version monitoring -> Download Path

currently: https://download.juniper.net/software/av/uac/epupdate_hist.xml