I just had a case open on this.. Try downgrading your JVM to 1.4.2_15 http://java.sun.com/products/archive Fixed my problem but it is a bug.. Justin ... View more

Great. Would love you hear your thoughts. ... View more

scripting SSH is not that hard with PERL. You load activestate (free) on the workstation. Here is a sample config of a SSH login: use Net: SH: erl; my $host = '10.0.0.1'; my $ssh  = Net: SH: erl->new($host); my $username = 'test_user'; my $password = 'test_pass'; my $command  = 'uname -a'; $ssh->login($username, $password); print+($ssh->cmd($command))[0], "\n"; Cant help you with the other stuff but I figured out the SSH Perl stuff mostly by following examples found online. GL, Justin ... View more

inachu,   I agree that would be good to have but thats not what the tool does. All the tool does is look for all the Products related to Juniper-SA. (NetConnect, Host Checker, Installer Service, Browser Objects, Cache Cleaner, etc), going back years in versions and it kicks off the provided uninstaller in a unattended manner.   I kept running into the user that had 4 versions of NetConnect installed was freezing at login. The fix was to uninstall all components and reboot. Thats basically what the tool does. I put it on a public site and when users cant get in I tell them to run it and reboot. This resolves a lot of issues.   I think Juniper should take over this effort. Symantec provides something similar for there customers, I think its called Power eraser or something.   You might want to check out RegScanner by Nirsoft. It's a great tool and makes it easy to look for references of one string. It will display all the results without having to hit F3 or F5, or whatever. Then you can batch delete.   Good Luck !   ... View more

Yes, I think we do something similar. Just create a group with Anonymous set as the auth server. Set that group to have a custom UI page of the other site. Good Luck. ... View more

Thanks for the response, It's the first role and only role, UI options are enabled for the role. I never noticed the default options. Anyway, I put it in there and it still doesnt come up. This smells kinda buggy to me unless I am really missing something basic. ... View more

Just to provide a little more info, I just use this on a user who was getting a hang while the Network Connect client was attempting to auto-install. They get this error: Please wait ... launching Network Connect  Then it would just hang and never install or connect. The same thing with host checker and other Juniper products. Running the uninstaller script and rebooting almost always fixes it for me. ... View more

Jackie,   If you are talking about the post I made about 6.0R3.1 then I can tell you that the majority of my issues had to do with a dial up provider blocking access to crl.verisign.net.   For the most part my 6000 cluster on 6.0R3.1 is running well now. (At least its running just as good as 5.4 did) I still have a handfull of users (about 5-10%) that are having issues with fragmentation and retransmissions. I have a case open about this now. Other users were having issues with Kerberos authentication which could be resolved by applying a registry change from Microsoft. That problem is documented here http://support.microsoft.com/kb/244474  .   Luckily we have a backup VPN that these problem users seem to be working fine on. Good Luck. ... View more

where does it put the file ? What if you made the directory protected and didnt give the process rights to write files ? ... View more

If you can script something up to capture this then you can run this job as a NetConnect Windows Session start script. a .bat file that contained something as simple as this might work set > \\servername\sharename\%computername%.txt a file will be created for each machine that logs in. The name of the file will be the machine hostname. (obviously this works only if your using NetConnect. You can probably do something similar with HostChecker if not) ... View more

Hi Ken, Do you guys use login scripts ? Or how about a group policy login type script that deletes the file at login ? Even a simple script in the startup group or the RUN key in the registry of the pc? Just guessing here. Hows the roll-out going ? I'm hoping they are working hard on version 7 and it resolves all of our many NC issues. If not we may be fleeing come renewal time. Can't deal with another upgrade nightmare. GL, Justin ... View more

ah, so something upstream is dropping the traffic. Tracerts can be good at determining that. I also do a lot of telnetting to tcp ports at different spots along the way to the destination.  Work backwards from the destination hop by hop until it fails. Stuff Im sure you know. Anyway, best of luck. ... View more

Have ISP issues been ruled out ? Does it happen on a different ISP ? Is the user on wireless ? Does it happen on wired ? If all else fails you can try my uninstaller tool. It removes all NetConnect Components. After it runs have the user reboot and relogin. The components will then reinstall. I've seen this fix a variety of weird NetConnect issues. Tool is posted here: http://forums.juniper.net/t5/SSL-VPN/Updated-Unins taller-of-all-SA-PC-Components-GoAwaySa-V2/td-p/20 ...  ... View more

hmm... what kind of files do people typically download from your internal webservers? Maybe you can block internal networks by extension and allow all else. ie: tcp://10.0.0.0/8:*.exe tcp://172.16.0.0/12:*.exe tcp://192.168.0.0/16:*.exe      deny Message Edited by Jickfoo on 12-05-2008 09:50 AM ... View more

I'm pretty sure you need to export and import on the same version.   You could upgrade the 4000 to 6.1, then export the config and import it into the SA4500, or you might want to try downgrading the SA4500 to 5.4 and then important the code. (Not sure if the SA4500 can run 5.4 but its worth a shot) 5.4 is pretty old and I'm unsure how much longer Juniper will support it. If you do pick a newer version of code I'd test it out thoroughly before upgrading. Choose a high "R" version. ... View more

Give this one a try. Attachments: GoAwaySa-v2-modnoinstaller.zip ‏113 KB ... View more

Set them up a role which will bring them to a menu with links for Terminal Services and a Launch NetConnect Icon. Lock down NetConnect so you are only giving them access to particular ports on specific hosts. It's as secure as JSAM and no need to alter the hosts file. Another thought.. What gets added to their hosts file when they login ? If it's fairly static, could they add entries to their DNS Server.. ie Server1 = 127.0.0.5 ? If all they need is name resolution to make this work, then adding a couple entires to their DNS should do the trick. Good Luck ... View more

I dont think so. I'd like to see the technical details of how this works. Seems like a marketing trick to me. ... View more

So you want Host Checker to check the system Operating System and allow all Operating Systems to log in, except for Windows XP ? Is that correct ? This is working ok but the problem is that Mac's fail to install or run the host checker scan ? I have had problems with host checker in the past. One thought I have is to create a unique URL , and Realm for your Macs. Dont advertise it to anyone except the people having the trouble. Only allow specific users to log in via this method. Thanks, Justin ... View more