Hi after1, didn't get it if you're reffering t oa Layer3 VPN Deployment or some other functionality. If it's Layer3 VPN Yes you can have a Local DHCP pool on SA (Pulse / NetworkConnect) General: Don't forget to secure your administrativ access Strong-Authentication (Two-Factor Auth) If no Strong-Authentication is available use Long Passwords (with different Characters and Signs) Limit the IP Space which can access the Administrative Path regards NULL ... View more

Hi @Felipe, @after1 I would say you should describe the Grace time: which is about 5 Day's (as I know). That does mean if you're in a cluster and have 500 users on each node, you'll have the 1000 User until the grace period expires, afterwards you'll have only the 500 users license until you're adding again the second node. Hope this helps Regards, NULL ... View more

Hi dsolis, the useragent version isn't a real solution as it can be spoofed easily by most Browsers (also Smartphone / Tabs and so on). But if you can wait a few weeks Juniper should solve your problems ;-) regards NULL ... View more

hi after1, [1] it's for SSL VPN [2] it's for 802.1x / NAC / Dynamic Firewall Policy functionality I would say you go for [1] as you have posted in the SSL VPN category regards NULL ... View more

Hi wadcyr8_197, why don't you use a DTE Edition of Juniper SA, it does work on ESXi without any problems! Clustering is possible so you should be able to handle every possible case in a virtualised environment. LINK to DTE - www.juniper.net If you need to have the latest version of Juniper SA, use initially the DTE Image for deployment and then Upgrade it through a normal appliance image. Regards NULL ... View more

Hi there, also Kaspersky 2012 doesn't work properly and it has been integrated with 1.8.0 :).... Everytime a Client with Pulse connects he gets permission denied for Kaspersky out of Compliance (Not up to Date AV Patterns....) and he begins to download new AV Patterns on every try. Regards NULL ... View more

Hi There, don't know if anybody did read on developer.android.com Google is releasing Android Ice Cream Sandwich which does have a VPN Adapter integrated so applications can access it. Hold on until Android 4.0 and every Phone which is running ICS in combination with Pulse should be able to have L3 VPN. Regards, NULL ... View more

Hi ajacob, i realy don't understand why juniper can't provide x64 support if the upstream provider does have this functionality in his productline! SVW - OPSWAT Regards, NULL ... View more

Hi ajacob, those who you're refering to are different product lines from avira. But in generaly none of those does work in the "2012 release cycle". Case for Avira Free 2012 is open @CSC and Juniper did open a implementation request to opswat. (maybe you should search the ticket database and add those different product lines. regards NULL ... View more

From my Side i did open a Cas through CSC, still no specific ETA. They mentioned only next ESAP should include it and it will be availabe through the next "few" weeks. Regards NULL ... View more

Use a DTE Edition for testing all of your features prior to install the 7.1R4 release. Reason for it is we did have a lot of serious problems, it seems more a R1 Release then an R4..... ... View more

Dear zanyterp, did again a few test's on the demo/test box. So it seems I have now only 1 problem: RDP in Internet Explorer 9.08112.16421 does work like a charm. RDP on Firefox 6.0.2, clicking on the Start button, java screen does open but picture of the remote computer won't be presented. No I won't open a case on JTAC, or are you going to pay me or my Boss? (Most Juniper Products which I do work with SRX/NSM/SSLVPN are at the moment hardly broken....) Also a lot of those "engineers" @JTAC don't escalate there incidents and or don't understand the problem and the whole case goes in the wrong direction. Also they tend to write the Closing message as nice as possible, and even with false information's in it.... Don't know what's wrong with you guys... Probably a few customer / colleagues and so on should write to http://www.asponline.com/ so you won't get another top rating.... I'll hope Juniper Networks does understand the feedback of those few people who are speaking to them on this forum, because feedback on bad behavior and or bad products is good feedback so you can work on it (if you like to...). Regards NULL ... View more

Hi JusttryIT, the 7.1R4 seems to me a little bit buggy. First over all I could not upgrade from 7.1R3 to 7.1R4 ... "aka Service package not valid", JTAC did recommend to downgrade to 7.1R1.1 and then Upgrade again. Did this (in an test environment) and it passed. But after upgrade I could not start any applications which belong to some sort of an Start Button (Start Pulse / Start Java RDP) problem did only exist in Firefox, Microsoft Internet Explorer does work properly... Regarding your question (extract from Release Notes): 13. endpointintegrity-opswat - Host checker always fails an Anti-spyware check for Microsoft Security Essentials. (605368) _ So if your using Microsoft Security Essentials potentially there you have the reason. @Juniper: your release notes are totally screwed up (Ugly and not structured, have a look at OLD ScreenOS Release Notes).... No mention of Security Bug fixes! 1 Day after the release of 7.1R4 the Security Advisories get published, which do recommend for one Security Hole an upgrade to the latest platform release (7.1R4)...... (Release Note still not updated yet...) regards NULL ... View more

Upload a simple HTML Document to the Juniper SA with the flag (Don't evalutate). In this Document you can Integrate everything you want (scripts/redirects) and so on. So you can do a Agent / Client Check and then Forward it to the respective sign-in-page (realm) good work. regards NULL ... View more

Dear rakeshb, during the next few day's there should be the release of esap 1.7.0 so keep your eye open. Informations can be found over there (if released). Link-Esap-Releases regards NULL ... View more

open jtac i would say ... View more

are you sure that these specifications on the datasheet are also true for the authorisation only feature set? ... View more

Hi there, Datasheet-LINK SA700 will not have any possibility to scale above the 25 user Limit, so you'll have to go with the SA2500 Kit. Also if you need to do HA (Clustering) the only way is to take an appliance SA2500 and above. SA2500 means max 100 users as refered in datasheet. If you'r going to do a Cluster, for example active/passive, you can buy 25 per appliance so you'll get 50 in total (Usable!) regarding the RDP Application yes there is an application (java) and yes you can forward the user credentials. regards NULL ... View more

OTP does not create any problem if it is handled by Radius. so 100% functionality. the SA does also offer a lot of functionality regarding certificates. Client Certificates Code Signing Certificates Ca's I would recommend that you'r asking your reseller/distributer for getting a DEMO Box or a DTE version (Virutal / limited to 2 Users - Feature Complete!) so you can do a quick prove of functionality regards NULL ... View more

I would recommend you to observe the Configuration-Guide about Radius-Authentication. The Radius server can assign to every User a specific IP. regards NULL ... View more

You'r speaking about Full authentication of devices by Certificates, why aren't you aproaching following Idea? You can Use Device Certificate for Identification of Corporate Devices.(For lost Devices there should be a CRL in place) This way you would have to have the exactly Certificate on the Corporate Device + Username and the Password. regards ... View more

Dear kenlars, with HostChecker you won't be able to manage orverify iPhones or iPads. But there is another Product on sale by Juniper: Junos Pulse Mobile Security Suite ... View more

Dear Player, first over all you need only 1 Certificate for the Domain-Name which points to the VIP-IP. Also i would recomend that your going to build your csr (certificate signing request) with an open-ssl implementation (offline), so you can also specify the complexity of your private key + bit lenth 2048! regarding to your question about the client experience, they won't notice anything as the certificate is name based. regards NULL ... View more

Hi Telnet-1 Arcsight and Q1Radar do provide some sort of nice Log Manager. ArcSight Link (does Cost a few $) Q1Labs Log Manager (free) Both are easy to use an realy valuable Solutions! have a nice weekend. regards NULL ... View more

Hi michael.saw, what do you mean by syslog capacity, how many Events per second an MAG2600 or MAG4610 can shoot out? Or  do you mean how many log messages can localy stored? Thank you for providing more information. Best Regards NULL ... View more

Hi mrkool, it's also easy for you :-) don't think you'll need any Contractor! Create a Regular HTML Site (which does look like the picture you provided, with links to the right signing page) Upload it to Juniper SA (Check Flag don't check for Compliance [acutally i don't remember the exact phrase]) Create 4 different SignIn Pages (Electronic System | Intelligence & Security | Land & Armaments | Support Solutions) Don't forget that the URLs of those 4 signinpages have to match the specific URLs in the uploaded HTML Site Change the default Signin Page Template to the one which you did upload. have fun! Solution Complete :-) Regards NULL ... View more