Hi Natasha, With Host Checker antivirus remediation, we can prompt the endpoint to download the latest virus signature files, turn on antivirus protection, and initiate an antivirus scan.   Even with Pulse, AV remediation should work as long as it is enabled in Host checketr policies.So pulse remediation should work both for users connecting through browsers and using pulse clients Hope you have Download latest virus definition files check box option enabled as part of remediataion for the AV in SA admin GUI in Hostchecker AV policy configuration. Enabling this will enforce client to download the AV definition files which are missing however the AV installed on the machines should also been enabled to download the AV definitions. If possible you can get the URL for virus definition update URL from AV vendor and you can add this URL for users who are remediating by enabling Customer instructions . This is part of remediation config in SA HC rule. In pulse GUI when its remediating , the message should be "update in progress,once update done you will connected to network".   If the pulse client get stuck during remediation, we need to check the pulse debug logs at detailed level to understand what is happening during this time. Since it needs log analysis to confirm whether there is any issue at pulse or hostchecker side I recommend you to open a JTAC Case for further support. Hope this helps. Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks! Regards, Kannan ... View more

Hi,   I understand your issue.   Yes your requirement  is possible and supported SA MAG VPN , you can use Custom sign in pages where you can customize and write your own HTML codes based on your requirements. This HTML pages can be uploaded to the SA and you can map these sign in pages to your sign in URL in SA admin GUI.   I have given you the below URL's for Custom Sign-in Pages Solution Guide, you can access the below URL's for more information:   http://www.juniper.net/techpubs/software/ive/admin/j-sa-sslvpn-7.4-customsigninpages.pdf     Custom Sign-In Pages Developer Reference:   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/security-access-custom-sign-in-pages-developer-reference-8-0-5-0.pdf   Hope this resolves your issue.     Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan     ... View more

Hi Stephen,   I understand your issue.     The below Juniper Knowlegde base link also information on  Details on fixes for OpenSSL "Heartbleed" issue  with respect to  Junos Pulse/IC (UAC).   http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB29007   The above link also has fixed release information in 5.0 UAC, 4.4 UAC , 5.0  & 4.0 Pulse , you also have download link from this KB which redirects to the s/w download site.     I hope this will help you.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Sean,   Thanks for the response.   I have n't come across any scripts that customers use  on their end client PC's for AV definition update for remediation however I have seen customers using using the customer URL"s as part of customer instructions where they instruct user to intsall the updates.   However on this case I see the pulse client get  stuck during remediation, we need to check the pulse debug logs at detailed level to understand  what is happening during this time. Since its log analysis to confirm whether there is any issue at pulse or hostchecker side I recommend you to open a JTAC Case for further support.   Hope this helps.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Jeroen Bismans ,   I understand your requirement.   WAN clustering is not supported on the MAG Series Junos Pulse Gateways, except as it relates to campus networks. In a well-connected campus network, where the connectivity is more LAN-like than WAN-like, the Junos Pulse Gateways can be clustered in separate buildings.   this information is documented in SA admin guide in page# 23   You can use below URL to access the information about WAN cluster not supported: refer page#23   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/junos-pulse-secure-access-service-8-0-adminguide.pdf   Clustering MAG devices are supported on the LAN; but rarely on the WAN. The reason for this is that WAN connections are often the source of sporadic latency and reduced bandwidth that will almost certainly interfere with cluster communication; regardless of whether it is for MAG devices or the previous generation SA devices. In a well connected environment, in which latency remains low and available bandwidth remains high, the ability for each device to fully communicate without pause is preserved and clustered systems should not get confused over which system should own potentially tens of thousands of live user sessions. The nodes regularly communicate session, configuration, and timestamp information and any interruptions and loss of communications will impact cluster nodes, when attempting to recover. It is this LAN or campus network class of service that must be displayed in both the design and delivery, if maximum uptime is indeed the goal, as WAN circuits tend to become congested, when remote access is required. For high latency connections between cluster nodes, to maintain configurations between multiple systems across the WAN, the Push Config feature is the recommended approach.   The best network for Active-Active cluster connectivity of nodes is a LAN-Type or campus network with extremely low latency and high bandwidth.   Other good practices for an Active-Active cluster, when latency is high are as follows: Note: Disabling session and last access sync will cause users to re-authenticate, when connecting to other nodes of the same cluster.   Disable log sync Disable session sync Disable last access syn Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Sean,   When you enable remediation action Download latest virus definition files„Obtains the latest available file for the specified vendor from the vendorÍs website.   Turn on Real Time Protection„Launches the virus-scanning mechanism for the specified vendor.   Start Antivirus Scan„Performs a real-time virus scan for the specified vendor.   The check box is active if the action is supported for your product.     IC will download the latest virus defintion files based on your configuration on IC admin GUI  where it download the XML  AV signature files from https://download.juniper.net/software/av/uac/epupdate_hist.xml. AV on the client machine will ensure AV is up to date since it will have AV Update configuration   I don't think you need to enable links in customer instructions to download the AV update files.   Regards, Kannan   ... View more

Hi, As updated in the previous post clustering over WAN links is not supported, this is documented in UAC admin guide.   You can use thebelow URL , access the admin guide and refer page#912 for mor einformation:   http://www.juniper.net/techpubs/en_US/uac5.0/information-products/topic-collections/Junos-Pulse-Access-Control-Service-Complete-Software-Guide-5-0.pdf   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Natasha, Below is the URL to access SA admin guide.   Refer Page# 57 to 67 in the below SA admin Guide for installing the pulse using command line: http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/junos-pulse-secure-access-service-8-0-adminguide.pdf   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks! Regards, Kannan ... View more