SA 7.2 Features at a Glance - Discuss with Juniper Engineers

[philippa_]

Welcome to SA 7.2 Features at a Glance

As part of our commitment to improving technical support, experts from Juniper Networks are here to assist you in understanding the features in SA 7.2. As a focused effort towards technical understanding, better support, and faster updates, we have started the J-Net threads linked below. Each thread explains the basics of an individual feature and is open for discussion. Please post your thoughts and queries for features you are using or would like to use. Our senior technical engineers will be answering your technical queries, and will try to resolve each of them.

Please note that this forum is not suitable for sales-related queries or in-depth log analysis. We look forward to the dialog, and will answer all the technical queries we can; if there is anything we cannot cover in this forum, we will direct you to the appropriate team.

Please refer to the below links and use the thread most closely related to your query: 

• Pulse ESP Transport Mode for L3 VPN
• Credential Provider (for Microsoft Windows Only) through Pulse 3.0
• Pulse 3.0 Session Extension
• Host Checker for iOS and Android Pulse
• Cloud/Web Single Sign-On (SSO) via SAML
• Junos Pulse Collaboration (for Microsoft Windows and Apple iOS) using Pulse
• Support for Customized Variables
• Support Secure Virtual Workspace(SVW) for 64 bit Windows OS
• Support for 64-bit Internet Explorer Browsers
• Virtual Appliance Service Provider Edition (SPE) Rapid Deployment
• License Server Auto Leasing (a.k.a. Trust but Verify)
• Traffic Segregation (SA Series Virtual Appliances)
• Customization of FIPS Options for Network Connect

[mdella_]

Hi,

I have a query. If I create two role, one with Network Connect and another with Juncos Pulse. Then I insert these two roles in the same role-mapping in the realm.

But when I open Internet Explorer and login, I just see Junos Pulse. Can i do something to show Junos Pulse and Network Connect to user choose?

Thanks

[SHKM_]

Hi Mdella,

           Yes, we can do that. Let say,

Pulse-role

NC-role

In role mapping rules, enable both Pulse-role and NC-role. In the same page you can see below options

a)  Merge settings for all assigned roles
b) User must select from among assigned roles
c) User must select the sets of merged roles assigned by each rule

You can choose b) so that, when ever user login they get a prompt to choose Pulse-role or NC-role. According to user selection, they get Pulse or NC option.

Also, I suggest to go through the KB article

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=S:KB23331&smlogin=true

Specifically, read the bottom note.

Hope this helps you..!

Thanks,

Suresh

[RexPGP_]

You can use AD Variable to Custom to set static IPs. All my custom variables were being used.

With 7.2 can I set a custom varialble in a role that I can use in my NC profile

ROLE
if ID=ABCD then STATIC Varialbe = 10.10.10.10

NC Profile Static Pool

<usercustom.static> 10.16.11.129-10.16.11.235

[mdella_]

Hi,

I made some tests.

I created a NC (Network Connect) role then i tried to connect using my Junos Pulse 2.1 but i couldnt connect. But with Network Connect i connected ok.

This issue was the some when i used the JP role and tried to connect using NC.

Is this a problem of version 2.1 of JP?

I made a test with Junos 7.1r9. Next week i will try with 7.2 and using Junos Pulse 3.

I am trying to work with both clients because one of my customers is used to have only NC and we are trying to begin installing JP but it is a slow proccess.

Do you have any other idea?

[SHKM_]

Hi,

   I tested with 7.2 and Pulse 3.0