Hello again to everyone! Problem seems to be solved after changing the Device certificate to the internal interface. I'm only wondering why it behaves like that. ... View more

Hello Kita, your descripted behaviour is correct. That's what I also could find out when using both scenarios. When the client site certificate was missing, I was also getting an error which told me that someting was wrong with the chain. But this does not relate to my connection issue. I talked with Juniper Support _and the statement which Viji gave seems to be one of the main reason. When using Junos Pulse, the device Certifcate has to be bound to the internal Interface!. I have to check this in customer configuration because this is a two-armed setup. ... View more

Hello Viji, in my unterstanding (you may correct me), this does not depend on device certificate, because the certificates (Root CA nad Sub CA) for Client Authentication are imported into Trusted Client CAs. There is no error "like not trusted server" when browsing to the SA appliance. The authentication using Network connect with certifcates works! So, i think its a bug related to pulse 2.0? Kind regards ... View more

Hi there! Expericence the same error message with 7.1R3 and Junos Pulse 2.0R3. The Pulse client displays the descripted error message + Auth. Logging on SA shows annonymous - initialisation failed. Any know issues when using certificates on smartcards with pulse 2.0? With Pulse 1.0 we were able to choose the certifcate, but it also failed (withour error code on client). In this situation the SA log displayed a TLS handshake failed error. Maybe because CA Certificates from smartcards are not supported on Pulse 1.0 We checked the imported certificates, they have the BasicConstraint: CA included Kind regards Andreas ... View more

When you run it from an internal PC are you sure the traffic isnt just going to the resource itself and not through the port forwarder ? Yes traffic goes to the resource via the firewall. Are your sure the name resolution of the server name field is set up properly in the applications parameters area ? Nameresolution works fine. I can resoled allSystems (WI, MetaframeServers) from the IVE. Under resource policies, are you certain the resources have been set up to properly allow access (again, name resolution is important here, I'd suggest adding the IP of the device you want to port forward to as well) ? Yes, I have set the global Net's like 10.1.1.x:* and 10.1.2.0:* Under Resources try adding 10.x.x.x:* I don't understand what happens if I use the WEB-Interface. Other Applications will run well from outside. Does Anybody have a Document "HowTo setup a WEB-Interface for using it with IVE" ? ... View more