cancel
Showing results for 
Search instead for 
Did you mean: 

SSL Poodle

Valued Contributor

Re: SSL Poodle

For IVS, the setting on the root is system wide.  The change you make will apply to all IVS on the device.

Occasional Contributor

Re: SSL Poodle

Does anyone know if the Pulse and Network Connect client support TLS.  I've made the recomended change and the logs still show "connected with SSL transport mode".

 

Thank you!

Valued Contributor

Re: SSL Poodle

NC and Pulse should support TLS.  We are doing further testing to ensure there is no compatibilty issues with any Juniper components.  In regards to the message, NC and Pulse should connect via SSL as this is used as the control channel.  However, the control channel should using TLS protocol only after the change has been made.

Occasional Contributor

Re: SSL Poodle

Any update on this one? Has anyone done the change on their end? Any issues experienced?

Contributor

Re: SSL Poodle

I have been running this way for at least 3 months with no issue. We have folks accessing our portal with everything from IE9-IE11 as well as Google chrome for windows and mac, Firefox for windows and mac, and Safari on mac and no one has encountered any issues.
Occasional Contributor

Re: SSL Poodle


@Antioch wrote:
I have been running this way for at least 3 months with no issue. We have folks accessing our portal with everything from IE9-IE11 as well as Google chrome for windows and mac, Firefox for windows and mac, and Safari on mac and no one has encountered any issues.

Thanks for the info.

 

Couple of follow-up questions for you Antioch. when switching to TLS only, did you also uncheck the SSL Legacy Renegotiation Support option - 

Also do you have Network Connect or Junos Pulse users connecting to your box? Anything on that side since you've switched?

 

I've done the tests on my side and it seems to be working fine like you said on the major browsers as far as I can see. The only concern I got are people still using older browsers like IE6 that might not be working...

Highlighted
Occasional Contributor

Re: SSL Poodle


@kita wrote:

NC and Pulse should support TLS.  We are doing further testing to ensure there is no compatibilty issues with any Juniper components.  In regards to the message, NC and Pulse should connect via SSL as this is used as the control channel.  However, the control channel should using TLS protocol only after the change has been made.


Hi Kita,

 

Any update on those compatibility tests results?