- Pulse Secure Community
- :
- About miked_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
miked_
Contributor
57
Posts
0
Kudos
1
Solution
12-18-2013
07:55:AM
Thank you both, as it turns out you were both correct, for us, it was a lot simpler to just use option one in the KB. Thanks for posting it, i never seem to have any luck actually finding what i am looking for in the juniper KB sections. In any case, good post for anyone in my situation and a very simple fix. mike
... View more
12-17-2013
04:11:PM
Thanks for the reply, Just so I am not going crazy, the way I have it in production now as stated above was supported? What changed? ______________________________________________________________________ NOTICE TO RECIPIENTS: Any information contained in or attached to this message is intended solely for the use of the intended recipient(s). If you are not the intended recipient of this transmittal, you are hereby notified that you received this transmittal in error, and we request that you please delete and destroy all copies and attachments in your possession, notify the sender that you have received this communication in error, and note that any review or dissemination of, or the taking of any action in reliance on, this communication is expressly prohibited.
... View more
12-17-2013
01:53:PM
Hi, we just upgraded our lab unit to 7.4r7, to overcome the activesync/owa issue that is documented, we had used an IP address for the Virtual Sign in profile for Active Sync and then the FQDN for OWA, this works in the version we were on which was 7.1r7. Having just the IP now breaks activesync, i suspect becuase of the certificate. Has anyone else seen this? I assume we would now have to get a new cert, add another name to it, and then install it on the exchange box and use that FQDN (internally) for the IVE activesync sign in......
... View more
11-19-2013
06:02:AM
I can confirm that IE11 breaks WSAM and generally doesnt work, even in compatability mode on Windows 7. Running 7.1R7 here.
... View more
03-26-2013
12:08:PM
We are trying to get Autodiscover to work, so when a user gets a new mobile device they can simply type in their email address and have the settings populate correctly. Our issue is getting to the Autodiscover.xml file which sits behind our SSL. I am trying to have it come in on our ActiveSync policy to retrieve the file. Which doesn't work. Any suggestions, or input on how someone else may have set this up?
... View more
10-01-2012
06:07:AM
Thanks, ended up having to open a case with JTAC, they are researching.... but yes, it appears as though DHCP via the NC profile isn't allocating IPs correctly, and issuing duplicate IPs to NC users. The temp fix for now, is haveing NC hand out IPs directly so we modified our internal DHCP scope to exlude the ones the IVE is now handing out. Not ideal but waiting to hear back from JTAC.
... View more
09-27-2012
06:37:AM
Not sure what's going on, but this has happened to a few users now, including myself, at random points. Environment: System Version 7.1R7 (build 20581) We use NC with split tunneling, policies are set to allow full access to our DNS/AD servers and Exchange. Sometimes users will launch NC, NC connects to the network no issues, but then Outlook wont connect. When doing some basic ping troubleshooting, can't ping anything on the network, or, even more oddly, can ping some servers and not others. We have found that to correct the issue, if we log the user out and then log on as someone else form the same computer and launch NC, log out and then re logon as the original user having the issue, it fixes the connectivity problem. Any thoughts?
... View more
08-23-2012
05:10:AM
dusannovakovic, your link to to your graphic was great, we had been running fine for years and just swapped to mag2600's in a cluster, imported the config from our SA running the same code base and i recieved the errors specified in this thread, very odd since the setting work fine in our production unit. Anyhow, went through and changed AD server names to just IP, removed the dashes from the computer names, and also left it with just kerberos and presto, everything worked. Odd but oh well. As for the yellow warning about server is either not a domain controller...... i still get that, but i hav been getting that since we started using the SSL way back from the 6.0 code base.... not sure why it pops up, chalk it up to something that development should either remove or clarify to whats causing the issue. thanks!
... View more
04-30-2012
06:15:AM
Thanks Sonicboom, we are going to setup pulse on our lab unit to see if it performs any better.
... View more
04-30-2012
06:14:AM
Thanks zanyterp, ESP is enabled as the default with fallback to SSL, and compression is disabled.
... View more
04-16-2012
12:52:PM
Thanks for the reply, NC stays connected the entire time. Multiple users, although we only have it deployed in this fashion to 3 users due to this issue.
... View more
04-12-2012
05:42:AM
Just wondering if anyone uses both NC and Shoretel Softphone? We seem to have an issue where the softphone, at random times, for no apparent reasons, will just drop, there is no rhyme or rhythm to when it drops, could be 5 minutes, could be 2 hours just drops. We had our shoretel gold partner look at it and they can't see any logs on the shoretel side that point to anything. Its done this through various versions of Shoretel upgrades as well. Our environment is we have the shoretel system on its own subnet with all firewall ports open per the documentation, yes I tripplechecked the ports to make sure we didn't miss any (its basically everything anyhow) Yes we have ToS checked on the NC client- doesn't appear to make a difference in either direction with that. The only thing we can think of is if latency gets to a certain point, the phone drops- although the NC VPN never does. Anyone have any thoughts? Thanks in advance.
... View more
07-26-2011
08:00:AM
Wehave several realm level HC policies, most for end users but one for IT which is different than those of end users. At the top level of the realm HC is set to eval all of the policies which is how it is supposed to be setup, and then at the user group for IT we have just the HC policy that applies to IT set as a enforce. In the role mapping, we have the IT group listed and then set to STOP processing rules. However we see that HC is applying and enforcing a role ontot he IT group that doesnt even apply. Any ideas?
... View more
03-23-2011
01:37:PM
@fuman.... thank you, although here is where the issues lies (irregardless if I have 2 or 3 policies at the realm level) The user logs in, and then the realm level policies are all set to evaluate, the user also evaluates the IT policy, except instead of just evaluating, it enforces at the realm level. So the user is not able to log in.
... View more
03-22-2011
07:23:AM
Been scratching my head on this and hope someone can provide me some clarity. It shouldnt matter for this question, but I am running IVE OS 7.0r4. In the endpoint I have a policy that evaluates for AV another policy that evaluates for FW and a seperate policy that is supposed to only be for IT that adds a few more supported AV vendors than just the regular users. In the realm have it set to evaluate all three policies, in the user role (depending on the role) these host checker policies are required. Here is the delema, the IT policy at the realm level, where it is only set to evaluate and not enforce, is kicking my end users off even though the end user doesnt have this policy listed in their role as a requirement.... what am I missing?
... View more
02-04-2011
05:38:AM
Yes, just yesterday as your note was a reminder... my network admin got a hold of jtac and they gave us a filter to apply for re-writing. Looks like it is a known bug since the filter calls it that. Here is what the filter looks like once installed: Bug Description URLs Enabled 556158 Unrewrite ChildNodes *:*/owa/*/scripts/premium/uglobal.js We applied it to both our lab unit running 7.0r4 and production unit running 7.0r3 and it seems to have done the job, still testing fully, but on the surface much improved. Reference that bug and they should be able to get the filter for you..
... View more
01-20-2011
12:42:PM
There is documentation on how to upgrade, as a best practice you should hit 7.0 first and then upgrade to 7.0r4 there are several major changes from 6.5 to 7 so testing would be important. with that said, i jumped from 6.5 to 7 and then to r4 and di not have any issues, but every environment is unique.
... View more
01-19-2011
07:32:AM
I am under the impression that the installer service autoupgrades itself when users log into an SA with a higher OS version..... i thought i read that somewhere but cant seem to locate it right now.
... View more
01-19-2011
07:28:AM
As far as i know, OWA 2010 SP1 support wasnt introduced until 7.0R3......
... View more
01-19-2011
07:27:AM
I have 7.0R4 running on our lab unit, and yes, i see the same performance issues on that platform running OWA 2010 SP1
... View more
01-18-2011
02:40:PM
Hey Russ, I have not been able to resolve. The only the way to address it, or make it a little better, is to turn off all notifications and auto spell check. I have been slammed with finishing up the rest of our virtualization project, but i will open a jtac case on this as well and see if we can get some resolution.
... View more
12-07-2010
04:28:AM
I am on 7.0r3 and i have the option of displaying Pulse exactly like you mentioned, on the page and user clicks start to intiate. You can also configure pulse to automatically come up after the user logs into a computer and then simply just enters their UN and PW directly into pulse without having to visit the SA website for login.
... View more
12-07-2010
04:22:AM
Yes that is exactly true, the new mobile security platform is licnese based but not PULSE for connecting back to your SA.
... View more
12-07-2010
04:14:AM
Thanks I should have clarified, this is all in IE8, IE7 and firefox- the critical error mentioned in the notes is a separate error. thanks!
... View more
12-01-2010
09:53:AM
I have OWA 2010 with SP1 on Exchange 2010 running just fine using the template in 7.0r3 (no modifications) but i noticed the following and was wondering if anyone else has: 1) With "display new mail notification" turned on, OWA hangs for a few seconds and then new mail shows up. OWA is not usable in this fashion if you recieve a lot of email due to freezing. 2) The Options button when in mail, once clicked, takes a few seconds to actually display all the available options, usable but a nuisance.
... View more
11-18-2010
05:54:AM
We performed our update as well from 7.0r2 and no issues. If you have a lot of log files, that will cause the update to take longer....
... View more
11-17-2010
09:33:AM
I suppose someone should start the question... when will we see Junos and SSL VPN capabilities supported?
... View more
11-17-2010
09:28:AM
As for R2, they claim it is supported but we had to change some priveldges on the admin account we use for the SSL, it was detailed and Juniper has no documentation on it, so not sure why they keep saying R2 is supported and not provide the documented changes that need to occur. Below is what ws done in case anyone needs it: These instructions were compile from KB2624 and working with Juniper Technical Support. The KB article is not entirely accurate so follow the instructions outlined below. These instructions have been tested with Windows 2008 R2 and IVE 7.0R2. On Windows 2008 R2 Domain Controller 1. Launch AD Users and Computers 2. Right Click the Computers Container and Select "Delegate Control" 3. Click "Next" on the Welcome Screen 4. Click "Add" Button and enter the Group or User that is configured on the IVE (Aut Servers Section of the IVE "Admin Username") 5. Click "Next" once the user has been selected 6. Select "Create a custom task to delegate" and click the "Next" button 7. Select "Only the following objects in the folder" and Check "Computer objects" and Check "Create selected objects in this folder" and "Delete selected objects in this folder" and click the "Next" button 8. Select "Creation/deletion of specific child objects" and check "Create All Child Objects" and "Delete All Child Objects" and click the "Next" button 9. Click "Finish" On the IVE 1. Aut Servers -> (select Athentication/Authorization Server) 2. Update the Primary and Secondary Domain Controllers to point to the Windows 2008 R2 Domain Controllers (also make sure NTP is updated to point to these if you are using the old Domain Controllers as the NTP Server Address. This setting is update from the Overview Page -> Click "Edit" link next to the current time. Enter the new NTP Server Address.) 3. Check the option "Domain Controller is a Windows 2008 server" 4. Verify the Admin Username and Admin Password matches the account setup with the delegated permissions on the Computer Container (please note that our admin account is specic for the IVE per a prior JTAC KB article) 5. Click "Save" Button 6. Click "Test Configuration" Button You may recieve the following message once the tests have complete. The warning message is normal. Warning. Either the server is not a domain controller of the domain or the Netbios name of the domain is different from the active directory (LDAP) name
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
