Thank you both, as it turns out you were both correct, for us, it was a lot simpler to just use option one in the KB.  Thanks for posting it, i never seem to have  any luck actually finding what i am looking for in the juniper KB sections.  In any case, good post for anyone in my situation and a very simple fix.   mike ... View more

Thanks for the reply, Just so I am not going crazy, the way I have it in production now as stated above was supported? What changed? ______________________________________________________________________ NOTICE TO RECIPIENTS: Any information contained in or attached to this message is intended solely for the use of the intended recipient(s). If you are not the intended recipient of this transmittal, you are hereby notified that you received this transmittal in error, and we request that you please delete and destroy all copies and attachments in your possession, notify the sender that you have received this communication in error, and note that any review or dissemination of, or the taking of any action in reliance on, this communication is expressly prohibited. ... View more

I can confirm that IE11 breaks WSAM and generally doesnt work, even in compatability mode on Windows 7.  Running 7.1R7 here. ... View more

I have, unfortunately no luck ... View more

Thanks, ended up having to open a case with JTAC, they are researching.... but yes, it appears as though DHCP via the NC profile isn't allocating IPs correctly, and issuing duplicate IPs to NC users.  The temp fix for now, is haveing NC hand out IPs directly so we modified our internal DHCP scope to exlude the ones the IVE is now handing out.  Not ideal but waiting to hear back from JTAC. ... View more

dusannovakovic, your link to to your graphic was great, we had been running fine for years and just swapped to mag2600's in a cluster, imported the config from our SA running the same code base and i recieved the errors specified in this thread, very odd since the setting work fine in our production unit.  Anyhow, went through and changed AD server names to just IP, removed the dashes from the computer names, and also left it with just kerberos and presto, everything worked.  Odd but oh well.  As for the yellow warning about server is either not a domain controller...... i still get that, but i hav been getting that since we started using the SSL way back from the 6.0 code base.... not sure why it pops up, chalk it up to something that development should either remove or clarify to whats causing the issue.   thanks! ... View more

Thanks Sonicboom, we are going to setup pulse on our lab unit to see if it performs any better. ... View more

Thanks zanyterp, ESP is enabled as the default with fallback to SSL, and compression is disabled. ... View more

Thanks for the reply, NC stays connected the entire time. Multiple users, although we only have it deployed in this fashion to 3 users due to this issue. ... View more

@fuman.... thank you, although here is where the issues lies (irregardless if I have 2 or 3 policies at the realm level) The user logs in, and then the realm level policies are all set to evaluate, the user also evaluates the IT policy, except instead of just evaluating, it enforces at the realm level. So the user is not able to log in. ... View more

Glad it worked out for you as well! ... View more

There is documentation on how to upgrade, as a best practice you should hit 7.0 first and then upgrade to 7.0r4 there are several major changes from 6.5 to 7 so testing would be important. with that said, i jumped from 6.5 to 7 and then to r4 and di not have any issues, but every environment is unique. ... View more

I am under the impression that the installer service autoupgrades itself when users log into an SA with a higher OS version..... i thought i read that somewhere but cant seem to locate it right now. ... View more

As far as i know, OWA 2010 SP1 support wasnt introduced until 7.0R3...... ... View more

I have 7.0R4 running on our lab unit, and yes, i see the same performance issues on that platform running OWA 2010 SP1 ... View more

Hey Russ, I have not been able to resolve. The only the way to address it, or make it a little better, is to turn off all notifications and auto spell check. I have been slammed with finishing up the rest of our virtualization project, but i will open a jtac case on this as well and see if we can get some resolution. ... View more

I am on 7.0r3 and i have the option of displaying Pulse exactly like you mentioned, on the page and user clicks start to intiate. You can also configure pulse to automatically come up after the user logs into a computer and then simply just enters their UN and PW directly into pulse without having to visit the SA website for login. ... View more

Yes that is exactly true, the new mobile security platform is licnese based but not PULSE for connecting back to your SA. ... View more

Thanks I should have clarified, this is all in IE8, IE7 and firefox- the critical error mentioned in the notes is a separate error. thanks! ... View more

We performed our update as well from 7.0r2 and no issues. If you have a lot of log files, that will cause the update to take longer.... ... View more

As for R2, they claim it is supported but we had to change some priveldges on the admin account we use for the SSL, it was detailed and Juniper has no documentation on it, so not sure why they keep saying R2 is supported and not provide the documented changes that need to occur. Below is what ws done in case anyone needs it: These instructions were compile from KB2624 and working with Juniper Technical Support. The KB article is not entirely accurate so follow the instructions outlined below. These instructions have been tested with Windows 2008 R2 and IVE 7.0R2. On Windows 2008 R2 Domain Controller 1. Launch AD Users and Computers 2. Right Click the Computers Container and Select "Delegate Control" 3. Click "Next" on the Welcome Screen 4. Click "Add" Button and enter the Group or User that is configured on the IVE (Aut Servers Section of the IVE "Admin Username") 5. Click "Next" once the user has been selected 6. Select "Create a custom task to delegate" and click the "Next" button 7. Select "Only the following objects in the folder" and Check "Computer objects" and Check "Create selected objects in this folder" and "Delete selected objects in this folder" and click the "Next" button 8. Select "Creation/deletion of specific child objects" and check "Create All Child Objects" and "Delete All Child Objects" and click the "Next" button 9. Click "Finish" On the IVE 1. Aut Servers -> (select Athentication/Authorization Server) 2. Update the Primary and Secondary Domain Controllers to point to the Windows 2008 R2 Domain Controllers (also make sure NTP is updated to point to these if you are using the old Domain Controllers as the NTP Server Address. This setting is update from the Overview Page -> Click "Edit" link next to the current time. Enter the new NTP Server Address.) 3. Check the option "Domain Controller is a Windows 2008 server" 4. Verify the Admin Username and Admin Password matches the account setup with the delegated permissions on the Computer Container (please note that our admin account is specic for the IVE per a prior JTAC KB article) 5. Click "Save" Button 6. Click "Test Configuration" Button You may recieve the following message once the tests have complete. The warning message is normal. Warning. Either the server is not a domain controller of the domain or the Netbios name of the domain is different from the active directory (LDAP) name ... View more