- Pulse Secure Community
- :
- About Mrkool_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Mrkool_
Super Contributor
251
Posts
0
Kudos
8
Solutions
01-06-2009
11:23:AM
are you using the FQDN or the IP of the server and not a short name? i.e. if you are using a server on juniper domain make sure you type the full name of the server net use q: \\abc.juniper.net\share /u:username password i am thinking it is a DNS suffix issue. try the above command or instead of the FQDN try the ip of the server
... View more
12-30-2008
12:03:PM
i second upgrading to atleast a later version of 5.5. If Juniper has not stopped supporting bug fixes for 5.5 yet they will be very soon.
... View more
12-30-2008
12:01:PM
Fahad, You should really read up alot before setting this up. there are alot of diffrent ways Junipers can be setup but once they are setup a change will require downtime and this is always a big issue for us. you can hide the external interfaces behind a nat but than we ran into issues using the pass through proxy so i recommend putting the external interfaces directly on the internet but behind a firewall. the VIP for the cluster is setup in the cluster setup and not the network configuration. The cluster setup will only show up if you have a cluster license though.
... View more
12-30-2008
11:43:AM
this looks just like a smart card solution only this is generating OTP instead of a cert. I dont see a reason why this should not work bec as long as this server can talked radius and you have a way to pass the credentials from this device through juniper back to the auth server it is just a radius call. Have you tried doing a tcp dump on the inside interface of juniper to see the auth traffic?
... View more
12-30-2008
11:38:AM
this is a two factor authentication scheme and i dont think juniper supports this auth server yet what you can do is setup your printed grid server to accept a radius call and wehn the user types in the information it is packaged as a radius call from junipers percpective and then sent to the Grid server and after grid server verifies that the grid is good it sends an allow back to juniper.
... View more
12-30-2008
11:33:AM
well i have 1 pair of sa2000 and 3 pairs of sa6000s and none of them revert back to primary i always have to do a manual failover. The rank only kicks in if you do a restart of the cluster or the cluster services as Mel mentioned.
... View more
12-18-2008
12:27:PM
well do you have IVE and IVS? or just IVE? Also have you tried to do a grep on all your logs for "Access blocked after DNS lookup " string and see how many hits do you get?
... View more
12-01-2008
12:38:PM
I would say go with vasco we have over 25k users and the price diffrence between vasco and rsa is ridiculously huge. Just to give you an idea the price we pay each year to RSA just to renew the license and maintenance is more than a brand new 25k users setup for VASCO with Go 3 tokens. Also Vasco does not charge you diffrent for diffrent types of tokens so you can pick from 26 diffrent kinds they have including the talking one :) ohh and we are switching to VASCO early next year. Message Edited by Mrkool on 12-01-2008 12:39 PM
... View more
09-11-2008
09:29:AM
I am testing 6.2r2.1 as well. it looks pretty stable and i do use rdp no citrix though.
... View more
09-11-2008
09:28:AM
turns out it was one of the host checker policies the new host checker does not like %systemroot% for vista
... View more
09-10-2008
10:36:AM
you can just uninstall bonjor it will not uninstall anything else like your itunes or adobe just the bonjour.
... View more
09-10-2008
10:17:AM
i am testing this in my lab and everything works fine in xp but on vista the host checker crashes right away and it also does create a debug file but the file is a .dmp file so i can not see what is in it. Any one else seeing this? i have tested from multiple vista computers and it happens on all of them.
... View more
09-10-2008
10:14:AM
i am running 6.2.r2.1 and i am not seeing any spikes so i guess this is fixed but i am running the code in my lab so there are no users except me doing some testing
... View more
03-14-2008
10:36:AM
so does the dns resolution break inside the vmware session or the host os? Message Edited by Mrkool on 03-14-2008 10:37 AM
... View more
03-12-2008
12:54:PM
I have multiple internal VIPs and i am trying to see if the outbound traffic from the juniper be sent out from the VIP instead of the physical interface IP?
... View more
02-29-2008
01:06:PM
so when you say there is no option in the "admin GUI" does that mean there is an option some where else? like if i open a tac case will the tac engineers be able to look at the file and give me the numbers i am looking for?
... View more
02-29-2008
12:47:PM
well i am running 5.5 on a 2 member cluster and am running 6.0r4 on another one and 5.5 shows the option but 6.0 does not.
... View more
02-29-2008
12:46:PM
well logging in as the users is not an option as i have over 20k users. there has got to be a way though i am testing 6.2 in the lab and i cant find anything in that one either
... View more
02-28-2008
03:49:PM
well another thing i found is that if you have the clustering enabled as active passive or even active active and have synchronize log messages between the cluster memebers that cuases more problems as well. I have had the box crash multiple times with diffrent reasons but all under load of around 1700-1800 users.
... View more
02-28-2008
03:45:PM
well i ran into this issue when i installed 6.0 beta on my lab sa-2000 boxes. Juniper offered to exchange one of my boxes for a new one so they can look at the issue and the new one i got upgraded to 6.0 just fine. try using an older version like 6.0r3
... View more
02-28-2008
03:40:PM
6.0Rx i think that is not even an option to choose uni multi or broad cast.
... View more
02-28-2008
02:53:PM
well i am trying to find if there is way to find how many users have the user bookmarks and what is the number of personal bookmarks do i have? One indication of this will be the size of the user accounts file that holds this information. My file is around 42 MB so is there a way to get the userbookmarks out of the file or are there any stats out there that tell me if my file size is 40mb how many user bookmarks could i have in there?
... View more
02-28-2008
02:38:PM
VNC or some other live remote access software will be the way to go in your case so that after the tunnel is established the helpdesk can take control of users current session and not log them off. Also as far as i know i don't think there is a way to run the netwrok connect as a service and besides that will be a very very bad idea using a static password for a tunnel is never a good thing. SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
02-28-2008
01:50:PM
We are running two sa-6000 active/passive and we have disabled split tunneling. I have heard from 3 diffrent users that are able to split tunnel this is out of 30k+ users. Now others could be using it and not notifying us. I can not duplicate this behavior it happens for these users at home and they are not running anything special. Default ip pool 192.168.1.1 / 24. Linksys / Dlink router. some file and database servers. These users can access these file and DB server even after they have established a full tunnel. I have rechecked all my roles and i don't see how is this working. their routing table does not show anything out of the oridinary either. If they do a trace to one of their local comptuers it starts from their computer and than comes into our network and after 4-5th HOP jumps back to their home network and finishes on the server on their local network. I am running 6.3R2-1 SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
02-28-2008
01:31:PM
if you have multiple resources that have the same URL than only one will show up. As a test can you change the url of the new resource to 123.com and see if the new resource shows up? SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
02-28-2008
01:13:PM
well if your users are authenticating againsd the AD than you already have the info you just need to enable the SSO option in the resource profile and use <username> and <password> variables. SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
02-28-2008
01:12:PM
any error messages? SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
02-28-2008
01:08:PM
The other day i had about 3400 users running on my SA-6000 and the CPU stayed at 100% through out the day. I had about 3-400 Network connect users 100 of them were using 443 and the rest using 4500. The rest were web users using OWA and sharepoint etc. Now i am running 6.2R2-1 that has a bug for high CPU utilization for NC users that fail over to SSL but what is normal Max users that you have run on your single SA6000? I am running a SA-6000 SP pair in active / passive. SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
02-28-2008
12:47:PM
i dont think you can do this by automated system. you will probably have to call Juniper and tell them you want to MOVE the license. Now they might not agree to this becuase if you still have the old lic installed on the 2500 they can not revoke that license and you can continue to use that lic on two boxes. SA-6500 (7.3R3) Production MAG 4610 (7.4) Lab
... View more
- « Previous
- Next »
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
