cancel
Showing results for 
Search instead for 
Did you mean: 

Verizon Broadband Air Card issues with NC

SOLVED
BigJames_
Occasional Contributor

Verizon Broadband Air Card issues with NC

We just recently implemented our Juniper SSL VPN and I'm experiencing an odd problem with my users who are connecting via Verizon Wireless Broadband PC5750 Air Cards connecting to my SA4500 with NC. When the users are connected to NC they have no issues accessing private resources with the exception of browsing external web sites with a Proxy server. Our goal was not to prevent users from browsing external sites but while connected to the corporate network we wanted the content filtering to better secure our environment so we direct them through our proxy. We control the proxy server definition (.pac file) on our Windows devices through GPO so we do not force down a proxy in the NC configuration. I've confirmed the clients are able to get to the .pac file on on the internal network and have confirmed they are performing DNS lookups without error but the no web page in the browser is displayed. Network captures have been inconclusive. We've eliminated client firewalls and other security software from being the cause by removing them from the Windows clients.

About 65% of my mobile workforce use these cards exclusively for connectivity so this is causing me a lot of greif.

No other users are experiencing this issue using the same NC configuration coming into the SA through other internet connectivity.

I've seen other posts in the forum for users having disconnect issues with Sprint EVDO cards on NC. I've looked for compression settings in the Verison software (VZAccess Manager) and there is no setting to control it from there.

I opened a JTAC case and am waiting to hear back from them. If anyone has seen this or has any suggestions or information would be appreciated.

Configuration:

(2) SA4500 in Active/Passive cluster

IVE 6.3R3 build 13881

Network Connect with Local Subnet Access Only Split Tunneling enabled

1 ACCEPTED SOLUTION

Accepted Solutions
Tica_
Occasional Contributor

Re: Verizon Broadband Air Card issues with NC

Hi we had a similar situation, but our solution was to configure the proxy PAC file on the NC settings.


The problem was that the GPO configured a proxy pac file for LAN connections, but not for dialup connections. The 3G network we used was considered as a dail-up network with his own proxy settings.

Maybey this is the same case here

-Tim

View solution in original post

3 REPLIES 3
Tica_
Occasional Contributor

Re: Verizon Broadband Air Card issues with NC

Hi we had a similar situation, but our solution was to configure the proxy PAC file on the NC settings.


The problem was that the GPO configured a proxy pac file for LAN connections, but not for dialup connections. The 3G network we used was considered as a dail-up network with his own proxy settings.

Maybey this is the same case here

-Tim

View solution in original post

BigJames_
Occasional Contributor

Re: Verizon Broadband Air Card issues with NC

That was it! I sure am glad it was easy one! Thanks for the suggestion!

James

irish1_
Occasional Contributor

Re: Verizon Broadband Air Card issues with NC

Can you explain how you configured this PAC file to modify the Modem settings? Is this a separate PAC file that you direct your NC to or is it just enabling of the Manual Proxy setting in the NC Connection Settings. If I configure the NC settings to use a manual proxy it will change the LAN settings, but I do not believe it changes modem settings. I could be wrong, dont have an AirCard to test at the moment.

Ultimate goal here is to have the instantproxy.pac file to enable a proxy setting when launching NC and then remove when NC is exited if the IVE is logged into from users that use the AirCard. Need this to be automatic and not a manual process.