have you tried to see if your computer is able to resolve the address? like go to a dos prompt and ping the FQDN that you setup in the Servername field in JSAM setting? You know that you can not use an IP address in the server name field in JSAM bec the local host file can not map an IP to another IP address. ... View more

there are two ways to do PTP you can assign a diffrent port this way your user will click the link and will be sent to a new url http://www.yoursslvpn.com:8443 or what ever port you choose. i do not recommend this feature as most companies do not allow these non standard ports outbound. 2nd way is to assign a new dns name for PTP www.yoursslvpn2.com and when the user click on this link they will be sent to the site without re writing i am using this for most of my flash sites. ... View more

check users public ip address in the logs and see if it is changing ... View more

things do not just stop working? did you make a configuration change? is there a license issue? is there an error message that you are getting? there are other solutions but if VNC was working and your users are working with this now no need to change the method and go to a new solution. ... View more

we used to use RSA but have moved to VASCO (they have over 75million users using VASCO tokens compared to 25million to RSA) VASCO does everything that RSA does for 1/4th the cost ... View more

i for one do not see any attachments. it could be the fact the files are .exe tyry renaming them to .jpg and please upload again. thanks ... View more

as long as there is one installer service out there from 6.0+ than you do not have to push another one out. It should upgrade the service automatically when you go to 6.4R4 ... View more

I have always had that option this is how you get the windows.app error messages. Are you talking about Network connect dissconnecting randomly, due to an issue, or timing out bec the max session time or idle timeout? In all cases i am running 6.4R4, 6.5R3 and 7.0 and it does pop up in all three of them. ... View more

well one thing you might want to keep in mind that SSL does put more load on the box vs ESP now i did run into an issue where users failing over from ESP to SSL was causing our CPU to spike but that was couple of builds ago ... View more

just write a small script in perl or bash and run it as a cron job so that it emails the appropriate folks. ... View more

you will need to load a cleint like WSAm or JSAM to do a Explorer drive mapping. Not worth it in my opinion. Look at sharepoint as an alternative to manage files via the web ... View more

I seperate the diffrent categories by Roles. You setup a role for finance and one role for HR and than you can group those links. You can also have one role and than redirect users to an external webserver and customize that page all you want ... View more

hey Jahmal it is really great to see more juniper participation on these forusm especailly from senior guys like yourself. ... View more

i use VMs all the time and never had any issues but i always had issues with AVG so i stay away from that if at all possible. Use Avast instead and if you still want to keep AVG just do a reinstall of AVG but make sure everything is installed if you uncheck some settings in AVG like IM protection i have seen it report wrongly to juniper ... View more

I am pretty sure Juniper only uses the internal NIC to do the replication there is no option to choose which interface you want the replication traffic to go out of. You can have only external VIP as an internal VIP is only for inbound traffic so unless you have internal users getting to the IVE you do not really need an internal VIP. the encapsulation is 3Com XNS not sure about encryption method ... View more

i think this is not the right forum for this you might want to ask this question in the Firewall section ... View more

good question so i did a quick capture on my internal port and my primary and passive 2ndary are talking on udp and TCP port 4804. the data field looks encrypted but i could be wrong. ... View more

well does your sa2000$ account have all the appropriate admin rights? or is it a domain admin? If it is not than it could be that sa2000$ is not able to join the domain and giving a pre authentication failure and you will not see any side effects of this issue if you are not using any AD group to role mapping. ... View more

are you doing full network connect or you trying to get this working via NFUSE? ... View more

you will want to get the nc.windows.app error number these users get when they get dissconnected. most of the Dissconnect information is found in user logs rather than IVE ... View more

you can configure SNMP traps on your IVE to send out alerts for diffrent hardware thresholds. ... View more

one thing to keep in mind when going rom AD to LDAP is that all your users custom bookmarks they have created are stored in the AD auth server so if you do this you will loose all those as currently there is no way to export the user created bookmarks and import them into another auth server ... View more

Did any one find out why this was happening? I have a user that gets this every couple of minutes and all my time outs are set for 480 min + and why the 316 years timeout? i am running 6.4R4 ... View more

never seen that one before what model and what OS version are you running on the IVE? also is this client side log or IVE? ... View more

well in my opinion if you allow split tunneling monitoring the route when they change is going to do very little for your security. So we always disable split tunnel but if you want to keep it enabled i dont think there is more protection in enabling route monitor. thinking of it logically split tunnel says the specified networks are goign through the tunnel and everytyhing else is not. If you are worried about some one hijacking your connection than sure route change is good but no one does that any more when they can infect your computer through the split tunnel and use your tunnel to get all the data in and out while making it look like you did all the trafficing ... View more

that site is indeed very well done and one of my favorite juniper login portals :) i just wished it would not be so hard to do something like this or juniper would have included some more samples as i am no html/jsp/asp expert :( posting your stripped down custom login page will be nice and would be greatly appriciated. ... View more

tessian sorry to go off topic but can you tell me more about this bug you mention in 6.4R4? i am currently running 6.4.R3 and i had a very similar memory leak and juniper wrote a custom code to fix the issue but the base os they used was 6.4R4. Did they tell you why do you have a memory leak? is it due stale authentication requests? ... View more