You can run a packet capture app (i.e. Wireshark) on your ethernet adapter to confirm if data is being sent through the tunnel or directly through your ethernet adapter. All traffic through the tunnel will be encrypted. ... View more

Hello Teaman27, I've seen this in the past and usually require the device to be RMAed. Please open a case with JTAC to quickly process your request. ... View more

Hello Adilnas, What client are you using? In most cases, the logs would exist in C:/Documents and Settings/All Users/Application Data/Juniper Networks/Logging. There should be a debuglog.log and a debuglog.log.old (if they have rolled over). This is the main location for all of the Juniper components. ... View more

Hello jpayne, It sounds like you may be running into other issues with the Junos Pulse client. I would suggest opening a case and provide the Junos Pulse logs and what version of Junos Pulse included in the case notes. We'll need to take a deeper look into the logs to find the root cause. ... View more

Hello jpayne, Do not include the chaining certificate in the certificate.pem as this will cause issue. Ensure only the public key of your client certificate is included, then convert to binary or DER format. This is important as Junos Pulse does not understand base64. ... View more

Hello Raj909, Is there anything in the debuglog.log from the client machine? The easiest way to read the logs is to delete the current file from the machine, replicate the issue, then go back and review the debuglog.log so you only have one complete transaction with the failure. This log should provide more detail of the failure. ... View more

Hello GiantYank, It may be a little difficult to troubleshoot this issue without viewing the logs. Can you provide me the case number and I will try and follow up internally to see what I can do to help? Thanks ... View more

Thank you for everyone's input and help. I will update the thread when we have resolution. ... View more

I believe I have enough information to reproduce the issue easily here. RIght now, it will only effect users who are running host checker and launching from the stand alone client. If anyone is seeing anything different, please update the thread. ... View more

Can everyone clarify if they are using Host Checker when this issue occurs? I believe I was able to replicate it with host checker enabled. It seems this does not effect end users that do not require a host checker policy. In either case, the user access log state I pass host checker, but when I launch from the stand alone nc client, it sends me back to the log in page. ... View more

Thanks for the info, kohster. It sounds like there may be an issue with the Java files. We'll keep looking into it. ... View more

I've tested the same with a 64-bit Java update 29 and did not have any issues launching from the stand alone nc client. Please start posting if you are seeing the issue with 32-bit or 64-bit Java, version of OS X and NC version. ... View more

I've tested both with 7.1R1.1 and 7.1R4 and cannot replicate the issue. I did notice the one of the users experiencing the issue was using a 64-bit version of the Java client. Can you please clarify if you are using a 32-bit or 64-bit version? My test were completed with a 32-bit version. ... View more

What release? 7.1R4? Note: This question is more for the administrator of the SA device as end user may not know what release they are on. ... View more

Hello Everyone, I am looking into this issue, but would like to know what 7.1 release everyone is on? ... View more

I ran a quick test with the AVG Free Anti-virus 2012 and did not have any issues with host checker detecting the software. My configuration was only checking for last anti-virus update. If you are running ESAP 1.8.0, I would suggest open a ticket with jtac so we can test the SA configuration against our lab to see if we can replicate the issue. ... View more

I would make sure you have the role set to Junos Pulse, not Network Connect. I've seen issue in the past if it is set Network Connect and you are connecting with Junos Pulse. Also, I would check the user access logs to see if the tunnel is getting created successfully on the SA side. Do you know if the VPN icon is on with Junos Pulse when you sign in? ... View more

What version of the IVE OS are you running? Junos Pulse is supported starting with 7.1, however if I remember correctly, I believe SA 700 is not able to upgrade past 6.4 or 6.5. I will need to double check. ... View more

Hello Quartino, Did you generate the certificate signing request (CSR) from the SA device? If so, you'll want to go to the pending request and install the certificate using the import option. You can simply copy and paste the content from the email and place it in a text file, then browse to the file. If the CSR was not generated from the SA device, you'll need to the private key (which generated the CSR file) and the public key (the one from the email) and use the Import Certificate & Key option. ... View more

Hey Jamoi, The MAG should automatically the hard drive and try to create the RAID array. There is a known issue with the MAG SM-360 between the admin UI displaying incorrect information about the hard drive in 7.1R1, but was fixed in 7.1R2. You may read more information about this issue at http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB20117 If this solution does not apply to you, please open a JTAC ticket to RMA the hard drive. ... View more

Morpheuss, I ran a quick test to confirm the difference between Network Connect and Junos Pulse. I had a certificate installed for client authentication and confirm it worked in both scenarios. The second part was to delete the CA from the end user machine. Now, the end user certificate is no longer trusted by the local machine. When I connected to the SA with Network Connect, it still prompted with the certificate and allowed the connection. When I connect to the SA with Junos Pulse, it automatically failed as it could not find any certificates that matched the CA and trusted. Most likely, this means that the proper CA chain is not installed on the local machine or the CA chain is not trusted by the local machine. ... View more

Toivo, Junos Pulse does support certificate authentication. Do you know if certificate authentication is working with a browser connecting to the SA device? If it does not, this is a good indication, there is something wrong with the certificate or how the certificate was installed. You'll want to make sure the proper CA chain and certificate are installed on the user account. Morpheuss, If it works in NC, but not Junos Pulse, I would still check to ensure both CA chain for both the user certificate and device certificate on the IVE are trusted. If I remember correctly for Junos Pulse, if either is not trusted, the certificate will not appear for client authentication. I can run a few tests and update you. ... View more

Hello Sanjay, What does it say in the user access logs or if you run a policy trace? This will use give you some idea what the issue could be? In the worst case scenario, you will want to open a ticket with JTAC which will request to enable debug logging to further review the potential issues. ... View more

Hey Laurence, You would not need to set this as a policy. All traffic that does not match the split tunnel policy will go through the physical adapter. ... View more

Hello Laurence, This will depend on if you want the traffic to go through the network connect tunnel or the physical adapter. Split tunneling should work as any traffic not defined by the resource policy will go through the physical adapter. There may a short disconnect, but I would assume TeamViewer will reconnect shortly after. If all traffic will need to go through the tunnel, are the end user able to reconnect the TeamViewer session after creating the network connect tunnel? If they are not able to connect, then this may be an issue with the policies which is not allowing access. ... View more

Hello Roland, I believe you meant to post this in Firewall forum. If this is an issue about the SSL VPN, please provide more details of your issue. ... View more

Hello Justin, Currently, Junos pulse does not display the file share bookmarks and would suggest contact your account team to file a request for enhancement (RFE) for this issue. However, I was able to figure out a workaround that may work for you. I've created a web bookmark for the main file share url. In my test environment, the web url was https://<IVE_IP_ADDRESS>/dana/fb/smb/swg.cgi. Once added, I could log in with Junos pulse and click on the bookmark to access the file shares. I tested this using 7.0R4. Note: This may or may not work in the future as the url may change. Also, this was not officially QA'ed so this may or may not cause other unintended issues. I would highly suggest to file a RFE to integrate this feature with the junos pulse release. ... View more

Hello Dan, If the proper intermediate CA are installed on the IVE, you should not be getting any chaining errors. The other possiblity is the root CA is missing from the device. If you are using a VeriSign certificate, you may want to double check with them as their hierarchy has changed directly to a four-tier hierarchy (two intermediates) plus it is cross-certified by two root ca (which can be a bit confusing). ... View more

Thanks for the update, trjones. I did confirm this as well that it was resolved in 7.0R3 and 7.1R1 for SA-4000FIPS and SA-6000FIPS compliant models. ... View more

Hello Arnold, I would suggest opening a ticket with JTAC as we would need to review the NC client logs along with the IVE (event, user access and admin) logs to narrow down the issue. My educated guess would be there is something in the route between the NC client and IVE that is resetting or dropping the UDP port (4500). We've seen this in the past when a personal router or firewall have a UDP time out set to low and started dropping connections. If possible, you can test out this theory by having the same user connect to the IVE through a different median like by-pass their personal router by connecting directly to the modem. This may help narrow down the issue from the end-user side. ... View more