About tonym_

tonym_ · ‎05-25-2010

Yes, we have seen this security flaw. It is a problem with the tcp/ip stack, so the issue is seen with other vendors besides Juniper. This issue is planned to be fixed in the new version 7 client, but don't quote me on that. Juniper is working with Microsoft on this.

tonym_ · ‎01-31-2009

Anyone have example how to perform an scripted automated login to the Juniper Support https web site and retrieve an XML file? The script then should save the file into a local Windows directory for retrieval by the IVE. We are struggling to get a working script for a while now and have no experience in this area. The XML is used in SSLVPN Host Check for AV DAT version checking.

tonym_ · ‎01-31-2009

One big change I found with 6.3R2 is the AV Signature checking. Before Host Checker looked at the date of the AV DAT file. With 6.3 in order to check the DAT file age, the IVE has to log into the Juniper Support site and pull down an XML file and uses that to check the DAT file version. The 6.3 version has no provision for going out thru the internal proxy server to the Internet.

Re: IPV6 split tunneling

Automated XML Retrieval w/ wget or perl

Re: Is IVE 6.3R2 Ready for Primetime?