UAC: Host checker for mobile device.

[nattaphol_a_]

UAC 4.2 release note said Juniper pulse access control service delivers new feature of host checker to detect  Jail-broken or Root device. I play around on host checker configuration and found there is no "mobile" tab when created hc policy. Nothing mention about this in admin guide document as well. This feature is highly required for BYOD security concept.

Please anyone here suggest. I have tried to upgrade to 4.4 and this feature still can't be found.

[kalagesan_]

Hi ,

Host checker feature for mobile phones are not available in 4.2 pulse access control service

To support the BYOD functionality we have come up with Mobile device Mangment support from 4.4R4.0:MDM.

We have a specific release for MDM support in pulse access control service 4.4.

This release begins to address the needs and requirements of enterprises to address extended Bring
Your Own Device (BYOD) functionality, including the connection between and integration of mobile
device management (MDM) and control, with network, cloud, application, and data access.

The integration of Access Control Service with MDM from MobileIron and AirWatch enables policy
checks for endpoint compliance assessment and remediation, regardless of the endpoint type. For
instance, if users attempt access from a mobile device, such as a smartphone or tablet, and their
organization has deployed MDM from MobileIron or AirWatch, their device would be checked against
the device management policies enacted in the MDM offering, using the available MDM client. If
users attempt access from a Windows- or Mac OS-based laptop (or desktop), their device compliance
is checked by Host Checker as part of the Junos Pulse client on their device

More information on MDM support in pulse access control service.

http://www.juniper.net/techpubs/software/uac/4.4xrelnotes/j-ic-uac-4.4r4-mdm-whatsnew.pdf

Release nots for 4.4 R4 MDM:

https://www.juniper.net/techpubs/software/uac/4.4xrelnotes/j-ic-uac-4.4r4-mdm-releasenotes.pdf

You can download the software from below URL:

http://www.juniper.net/support/downloads/?p=ic6500

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

Regards,
Kannan

[nattaphol_a_]

arrhhh, This is not possible if I do not purchase MDM from either Airwatch and Mobile Iron. sound is bad for me. The Juniper datasheet is fail.

[kalagesan_]

Hi,

I understand that you are not happy with mobile platform in UA Cnot supporting hostchecker however agenless Layer 3 access is possible from mobiles to UAC device.

I recommend you to either open a case with JTAC support or work with your local juniper SE to get more information on this

Regards,

Kannan

[nattaphol_a_]

Thanks Kanna

I did open case with JTAC. I got confirmation that UAC does not support and this is a document issue. I am wondering anything else goes wrong on Juniper document.

---

@kalagesan wrote:

Hi,

I understand that you are not happy with mobile platform in UA Cnot supporting hostchecker however agenless Layer 3 access is possible from mobiles to UAC device.

I recommend you to either open a case with JTAC support or work with your local juniper SE to get more information on this

Regards,

Kannan

---

[kalagesan_]

Hi,

Yes there is a documentation mistake regarding hostchecker support for mobile devices in UAC. 

We are working with our documentation team to correct this, documentation will be corrected accordingly soon. There is no support  availble for hostchecker feature in UAC for mobile devices.

To support the BYOD functionality we have come up with Mobile device Mangment support from 4.4R4.0:MDM.

We have a specific release for MDM support in pulse access control service 4.4.

More information on MDM support in pulse access control service.

http://www.juniper.net/techpubs/software/uac/4.4xrelnotes/j-ic-uac-4.4r4-mdm-whatsnew.pdf

Release nots for 4.4 R4 MDM:

https://www.juniper.net/techpubs/software/uac/4.4xrelnotes/j-ic-uac-4.4r4-mdm-releasenotes.pdf

You can download the software from below URL:

http://www.juniper.net/support/downloads/?p=ic6500

Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!

Regards,

Kannan