About mmesojedec_

mmesojedec_ · ‎09-21-2009

Hi, Is there any chance that someone attached the network diagram of integration Activesync on SSL VPN with exchange server. Also all URL should be marked on the scheme. can also someone explain what exaclty do you need to integrate this solution. Let say: - backend exchange - frontend exchange - SSL VPN (this is logical) I have only backend exchange server and SSL VPN, so is this enough or not? Any help is welcomed, because I am not able to configure. What is necessary to configure on the exchange server,.... cheers, Miha

mmesojedec_ · ‎08-12-2009

Just put your domain name in the "DNS suffix for this connection" field then just click OK (do this in the Juniper Virtual Adapter). This should put DNS suffix for your NC in the Juniper Virtual Adapter. cheers, mmesojedec Message Edited by mmesojedec on 08-12-2009 02:41 PM

mmesojedec_ · ‎08-11-2009

Hi Darktan, You cannot set the DNS suffix on the Juniper Virtual adapter in the SA settings. I think that this may be supported in the SA software version 7.0 (release Q1 2010). For now you can modify the registry settings for specific NC adapter (domain settings). You can also log in via NC and then modify the settings (Control Panel -> Network Connections -> Network Connect Adapter -> Right click -> Properties -> Internet Protocol (TCP/IP) -> Properties -> Advanced -> DNS tab). Then put your DNS suffix in the DNS suffix for this connection field (like: sslvpn.local). Just save and that is all. But this dns suffix is for all your NC. If you log to different web portal via NC your DNS suffix stay the same all the time. cheers, mmesojedec Message Edited by mmesojedec on 08-11-2009 11:01 PM Message Edited by mmesojedec on 08-11-2009 11:02 PM Message Edited by mmesojedec on 08-11-2009 11:03 PM

mmesojedec_ · ‎07-28-2009

Hi Kevin, Thanks for your answer. This help very much and works OK. What kind of Java plugin do you use let say for MAC OS PC. I try with Proper RDP but does not work (I think that there is java problem on PC). Any suggestion? cheers, Miha

mmesojedec_ · ‎07-27-2009

HI, Is there any way to upload some examples of MindTerm and Unllimitedftpsecure (some basic). cheers

mmesojedec_ · ‎07-24-2009

I think that you should import machine certificate into System->Configuration-> Certificates->Trusted Client CAs, then it should work. cheers

mmesojedec_ · ‎07-06-2009

You also need: - Java 1.4 or higer - MS patch KB 884020 - Admin rights on the PC - enable Java support in the browser - enable ActiveX in the browser - If you have some anti-virus program look if block traffic this should work.

mmesojedec_ · ‎06-09-2009

You can use Resource Profiles or Resource Policies when you configure KCD. If you use Resource Profiles (Web apps) you need to enable "Autopolicy: Single Sign-on" and select Constrained Delegation where you define your Resource and Credentials. If you use Resource Policies -> Web -> SSO -> Kerberos/NTLM/Basic Auth you need to select Constrained Delegation in the "Action" and define Credentials. Before that you need to set up Kerberos SSO Settings. Select Resource Policies -> Web -> SSO -> General -> Kerberos SSO Settings. You define server resource, user for KCD authentication (you have to create it in you AD server). You have to enable also some setting in your server (I use Microsoft Windows 2003 server). You can also use a Form post with you apps. I test this with OWA 2003 and some Web pages that need authentication. This works realy good. You can use Oracle OAAM, RSA, Certificates for authenticate users. User do not need to type his domain password.

mmesojedec_ · ‎06-04-2009

Hi, You can set up the SSO with RSA using version 6.4 of SSL VPN. In the version 6.4 you can configure the Kerberos Constrained Delegation (KCD). So when the user login to the SSL only put username and RSA token. There is NO second AUTH server. When the user logs to the SSL VPN with RSA credential and then want to access the certain resource (click on bookmark) the KCD creates ticket between SSL and AD. This ticket is used that user can log to their resource without typing in user credential again. The time between SSL and AD must use the same NTP source. The difference could be at least 2 min. In RSA server you need to assign tokens with users that are in AD server. This functionality with KCD is really good.

mmesojedec_ · ‎05-27-2009

Hi Stanislav, Can you more detailed explain below steps. I understan to create two roles, but where is mapped the first created role (HC restriction)? Also where is policy for NON remediation VLAN for restriction role? cheers, Miha

mmesojedec_ · ‎12-11-2008

Hi I attached the document that describe SA-IDP integration. Regards, mmesojedec JNCIS-SSL, JNCIA-FW, JNCIA-IDP Message Edited by mmesojedec on 12-11-2008 12:54 PM Message Edited by mmesojedec on 12-11-2008 12:55 PM

Re: Does Anyone have Clientless Activesync working...

Re: DNS Suffix for Network Connect

Re: DNS Suffix for Network Connect

Re: Hosted Java Applets - what are people doing?

Re: Hosted Java Applets - what are people doing?

Re: Host Checker Machine Certificate

Re: Windows Terminal Server Proxy : The server den...

Re: SSO with RSA two factor Authentication

Re: SSO with RSA two factor Authentication

Re: unable to assign remediation vlan

Re: Need help, SA + IDP as threats control