- Pulse Secure Community
- :
- About cryptochrome_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
cryptochrome_
Contributor
64
Posts
0
Kudos
0
Solutions
07-07-2011
09:59:AM
No sure I understand Micheal, SA is the hardware platform, and IVE is the sogtware that runs on top of it. That was how it used to be until now. Now there are new appliances that you can use to run IVE (SSL-VPN) and/or UAC (Network Access control). You can also download Junos for the box. So that where my confusion starts. Going to the support site and download page for the MAG, there is only a Junos download available, but from the same page it links to the software download section for the SA. If you go there, it only lists IVE build for the SA platform. Anyone know any details about this? Thanks Sascha
... View more
07-06-2011
11:56:AM
Hi, one of my customers told me today he was at a Juniper presentation and they were being told there that Juniper will kill the SA and replace it with a completely new, Junos based system. I couldn't believe that so I checked out Juniper's site. All I could find was the new MAG product, which seems to run Junos as the OS, but also seems to run IVE on top of it. Can anyone shed some light on this for me? What's going on here? Has IVE been ported to Junos? Is there feature parity between SA and MAG? Thanks Sascha
... View more
08-27-2008
07:31:AM
Thanks for that. But it does sound more like an Apache bug than a Juniper bug, doesn't it? If Apache is only accepting "Basic" but not "basic" or "BASIC" or whatever, then this - I would say - is an Apache problem. Or is it defined somewhere that the auth scheme token must be case sensitive? Sascha
... View more
08-27-2008
04:00:AM
Ok. I tried with entering a fixed username AND password. It still doesn't work. So I had the customer send me the webserver logfiles (apache with tomcat) and I found this entry: client used wrong authentication schemeÓ According to the customer, the server should be using BASIC AUTH. Any more hints?
... View more
08-22-2008
09:20:AM
Ok. So I tried entering the exact username without any variables, exactly the way it should be entered on the web application. The password was still set to variable password <PASSWORD>. That didn't help either. No success. Unfortunately I don't have access to the webserver logs...
... View more
08-21-2008
06:59:AM
ok, but the ressource is for many users, so I can only do this for testing. I will try. thanks!
... View more
08-21-2008
06:33:AM
Forget it :) I just got the trace. The trace looks good to me, although I am not experienced in interpreting the results. I seem to be using the right username variable. The trace lists about 10 or so different variables that I could use that all aply to the username: 2008/08/21 15:13:59 - Variable user = "xxx" 2008/08/21 15:13:59 - Variable userName = "xxx" 2008/08/21 15:13:59 - Variable realm = "xxx" 2008/08/21 15:13:59 - Variable userAttr.cn = "XXX" 2008/08/21 15:13:59 - Variable userAttr.uid = "XXX" I tried the <USER>.suffix as well as the <USERNAME>.suffix in the ressource without success. The trace seems to apply the correct policy though, so I assume it is sending out something to the webserver. I don't see any response from the server in the trace though: 2008/08/21 15:14:02 - Start Policy [WEBURL/SSO_BASICNTLM] evaluation for resource http:/xxx:80/netstorage 2008/08/21 15:14:02 - Applying Policy [Netzlaufwerke]... 2008/08/21 15:14:02 - Action [BasicSpecifiedCred] is returned 2008/08/21 15:14:02 - Policy [Netzlaufwerke] applies to resource 2008/08/21 15:14:02 - Start Policy [WEBURL/SSO_BASICNTLM] evaluation for resource http://xxx:80/netstorage 2008/08/21 15:14:02 - Applying Policy [Netzlaufwerke]... 2008/08/21 15:14:02 - Action [BasicSpecifiedCred] is returned 2008/08/21 15:14:02 - Policy [Netzlaufwerke] applies to resource 2008/08/21 15:14:02 - Start Policy [WEBURL/SSO_BASICNTLM] evaluation for resource http://xxx:80/netstorage 2008/08/21 15:14:02 - Applying Policy [Netzlaufwerke]... 2008/08/21 15:14:02 - Action [BasicSpecifiedCred] is returned 2008/08/21 15:14:02 - Policy [Netzlaufwerke] applies to resource (etc....) Any thoughts?
... View more
08-21-2008
05:59:AM
Yes. But I think I didn't put it right. Sorry for my english. I was trying the trace and the simulation, but the username that the user enters is NOT working for the trace. In order to start a trace, I have to provide the username of the user I want to trace. After entering that username and the trace or simulation begins, that particular username is not recognized. The usernames are coming from an LDAP server so my question was whether I need to enter something else in the username field of the trace page.
... View more
08-20-2008
11:33:PM
so from an application point of view I could do the same things with WSAM that I could do with NC, just be more restrictive on how the application is being used or which application is being used. Got it. Very interesting. I think I should explore this feature more :)
... View more
08-20-2008
10:18:AM
Wouldn't I have to specify the username for the policy trace before I can start it? Actually I didn't do a trace yet, I tried the simulation instead. For the simulation, you have to specify the user name, but that does not seem to work. It does not seem to verify the username against the LDAP server, thus it can't really find it nor map it to any roles.
... View more
08-20-2008
10:15:AM
Thanks everyone. I really appreciate your comments. One more question: Is SAM really limited to a a couple of applications or could I use any custom application I want? Sascha
... View more
08-19-2008
05:05:AM
one more thing... the users in this case are authenticated against a LDAP server. I just tried a policy trace and a simulation, and in both cases the username I supplied could not be found by the IVE and thus the trace failed (no role mapping). I used the exact username that the users use to login. Is it possible that I need to add something else to the variable to reflect the fact it is coming from LDAP?
... View more
08-19-2008
04:49:AM
just tried it with the <USER> variable. didn't do it. I'll keep trying.
... View more
08-18-2008
05:30:AM
Hi, I want to use SSO for a web ressource, that uses Basic Auth. The username on the web ressource is slightly different from the one that is being used to log into the IVE. The web ressource requires a suffix to be added to the username. Username on IVE: testuser Username on Ressource: testuser.suffix Could use a custom username in the web ressource that say: <USERNAME>.suffix and a custom variable password that says <PASSWORD> to get this done? If not, how would I do this? Thanks Sascha
... View more
08-13-2008
07:14:AM
Thanks. That's a good direction to investigate. I'll check it out. Cheers
... View more
08-13-2008
07:03:AM
Hi, can this be done? The destination server is a Novell Groupwise WebAccess. The login window is a standard HMTL form. Can I have the SSL gateway parse this page somehow and submit user credentials automatically? Thanks Sascha
... View more
08-13-2008
02:40:AM
Hi, I've read some books and the Juniper documentation, but I am still struggeling to fully understand the differences between SAM and Network Connect. When and why would I use SAM over NC? What are the conceptual differences? I understand that not all applications can be handeled with SAM (right?), but what else? What are advantages of using SAM over NC? There must be some, else it wouldn't be there and people would just use NC. Please enlighten me :) Cheers Sascha
... View more
08-13-2008
02:38:AM
Hi there, is there a way to set the terminal window colors for SSH/Telnet sessions? This seems to be a requirement by one of my customers, but I want to avoid using NC/SAM. Thanks
... View more
08-07-2008
08:28:AM
thanks guys. both solutions look good. I think I am going to try with WSAM first, as we haven't used WSAM at all yet and I am keen on playing with it :) cheers sascha
... View more
08-07-2008
05:21:AM
Hi, the native Microsoft RDP client supports the /console commandline parameter, which lets you connect directly to the console session instead of "virtual terminal sessions". Some applications seem to require this and we are running across this requirement right now. Is there a way to pass that parameter through the SSL machine? Or could we use SAM to do this somehow? Thanks Sascha
... View more
06-27-2008
05:14:AM
well the thing is, the autorules are not always on top, but always on the bottom... anyone?
... View more
06-27-2008
05:01:AM
Thanks Ben. I understand the concept, but I am wondering why I can not move my rules below the auto-rules. If I want to create the cleanup rule it is always placed before the auto generated rules and can not be moved.
... View more
06-27-2008
04:50:AM
That links points to the "download installers" section of the online help....
... View more
06-27-2008
04:44:AM
Hi, I am coming from a firewall world so I have the habit to end each of my policy sets with a "cleanup" rule, that blocks everything that has not been allowed through a previous rule. Right now, I have no manual rules in my policies, there are only auto-rules. Now when I try to add my cleanup rule, it is always placed at the top of the rulebase and I can not seem to move the rule manually (the < and > keyboard shortcuts don't seem to work either). Is this normal? Does this mean the auto-rules are always matched, no matter if I have a manual, more specific rule before the auto-rule? Thanks Sascha
... View more
06-27-2008
04:40:AM
Hi there, please excuse my newbie question. I am wondering if it is possible to pass along the user's login credentials to a webserver that he is accessing. Is this possible? What needs to be done?
... View more
04-01-2008
10:24:AM
All right, got it. Thanks! :)
... View more
04-01-2008
07:27:AM
Thanks Roy, what puzzels me with this design is the question how routing is supposed to set up on the internal LAN. If the default gateway for the network points to the firewall, the return traffic from SSL secured applications will be sent to the firewall instead of the SSL gateway (the firewall dropping it because not in state table). Am I right? Or will the SSL machine do some sort of NAT so external traffic will be translated to an internal address? Cheers Sascha
... View more
04-01-2008
06:05:AM
Hi there, I am wondering what would be the best option to put an SSL gateway into the network. I am planing on placing the gateway into a DMZ of the firewall, but I am not quite sure yet how I connect the internal end. Use two interfaces (internal/external), place the external interface in DMZ and hook up the internal interface directly to the LAN? Or use just one interface and use it for both, internal and externa? Or use two interfaces and put both into the same DMZ? How are others usually doing it? What's the best compromise between security and ease of integration? Thanks Sascha
... View more
- « Previous
-
- 1
- 2
- Next »
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
