Secure Mail

[filbert_]

Has anyone gotten Secure Mail to work? This is a new feature in 8.0 with Pulse Mobile 5.0.1.42083. When onboarding an ios device all I get is a box with the letter "S" and the server log shows "Invalid Activesync request".

Thanks

[filbert_]

Here is the information I found on configuration. http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/configuration/secure-access-secure_mail-conf...

I think it's a useful feature but a lot is going to depend on the cost. Currently it's a preview feature but there will be a per user license cost at some point. For a smaller company that just wants to provision and control email access in a BYOD environment it's a viable alternative to a full MDM solution. But because that's all it provides you would need to weigh the cost of this against a cloud MDM offering which provides this functionality plus a lot more.

[filbert_]

Have you installed a S/MIME certificate in the mail profile?

Check the Pulse client logs for more inforamtion on the error.

[filbert_]

jspanitz- activesynch still works in the traditional manner as well.

[filbert_]

NicoAdehis - The virtual hostname is created so your mail client can retrieve mail. You shouldn't be connecting to that URL with Pulse. What you need to do is create a sign in policy that uses a realm that will assign the role that you have enabled Secure Mail on. That will provide the onboarding of the device. The virtaul hostname is included in the mail profile that wil be pushed to the device.

eg

Create a role named "Secure Mail". Enable Secure mail on that role and configure the secure mail settings as required.

Create a realm named "onboard" and configure a role mapping rule to the role "Secure Mail"

Create a sign in policy */onboard and assign the realm "onboard"

Start Pulse and select the Enterprise tab. Enter "<your IVE hostname>/onboard"for the URL.

Enter the rest of the information as required.

That will onboard your device and push a mail profile which includes the virtual hostname you configured in the secure mail settings for the role "Secure Mail".

[jspanitz_]

So does this replace the current ActiveSync Proxy feature in the previous releases?  We use that now and there is no cost to it.  I'd hate to  upgrade and a) have to incur additional costs b) have our users phones all stop syncing.

[NicoAdehis_]

Hi Filbert,

with your information, there is some better

Now, i can onboard the device through the Junos app.

But, when my iphone try to get the email profile, it fail with this message : "unable to create the email profile after an error of configuration".

Did you have already seen this message when you configured your appliance ?

I've followed all your instructions but i don't see the difference.

Thank you for your help.

[NicoAdehis_]

Hi Filbert,

thank you very much for your return.

I use the same procedure of you point to, but i got the same blank page with a "S" as you in your first message.

When, i create the role for SecureMail, automatically a Signing in policy is create with the virtual hostname. 

But you say that i must create another ?

Thank you for your help.

[NicoAdehis_]

Small up

[Beetlejuice_]

I'm getting the same result as you are. Looking into it more I found the following Juniper KB article (KB16934) which point to a Microsoft Technet article. I stopped at that point...