Please use ESAP 2.4.6 available on the support site and let us know if it works.   ESAP is available for download @ ESAP Download   As per : ESAP 2.4.6 release notes suport has been added for :   Firewall Products [Apple Computer, Inc.] Mac OS X Builtin Firewall (10.9.x)    Thanks.     ... View more

The softid plugin from RSA is a Active X component. During the installation as well, you will see that the plug-in is only for Internet explorer. Firefox related plugin is not available. I never could find a similar plugin for the same. Thanks, PP ... View more

Toivo: You can find relevant regitry keys (except windows 7) at http://support.microsoft.com/kb/328010 SA Admin guide should be able to guide you in configuring the registry checks. P.S: I wasnt able to find the Windows 7 registry key, but will try again. If you find, please update this thread and also let us know if the above keys helped. Thanks, PVP ... View more

All: Please note that due to unforeseen circumstances we had to modify the KB. There were some issues related to the custom XML and had to be removed. http://kb.pulsesecure.net/KB16462 Thanks. ... View more

All: Juniper Networks in conjunction with OPSWAT has created a custom XML file which will adjust definition information reported for this product until the issue is addressed by Symantec. Usage of this XML file should only be considered by customers impacted by this issue. Please refer to the below KB for the URL info and information on reverting back to default configuration when the issue is fixed by Symantec. http://kb.pulsesecure.net/KB16462 Thanks. ... View more

Take a TCP dump on the SA internal port while doing a test configuration using only kerberos - if you see errors related to clock skew on kerberos packets (UDP 88) , there is a time sync issue between SA and AD server. They have to be within 300 seconds, hopefully you can get as close to each other - best using NTP. Thanks. ... View more

Is this one user or multiple user? The error looks like the client is not compliant due to Virus defs being out of date. Confirm if the AV defs are up-to-date. Also confirm that SA has the latest Virus def signature downloaded. If all fails, I would suggest opening a case with support, so that we can investigate further. Thanks. ... View more

Penguinpages: Windows 7 Enterprise is supported in Juniper SA 6.5R2 release. All other versions of Windows 7 are compatible platforms. All browsers are 32-bit browsers unless otherwise specified. Please see the following KB for more details: http://kb.pulsesecure.net/KB13195/ The error message you are getting "You are not allowed to sign in. Please contact your administrator." seems like related to role mapping failure, which could happen due to Hostcheck policies failing. Your administrator will be able to see in the user access logs which HostCheck Policy is failing. If he has enabled client side logging, debuglog.log file on your PC should give you details on which policies fail and if it is indeed related to HC failure. Thanks. ... View more

6.4 does have the support for AD 2008 on the SA device as AD Authentication Instance. But I have seen positive reports of LDAP Auth Instance against AD 2008 work pre 6.4. In my previous comment, I meant to "NOT HAVE" iveadmin as the primary group for the user. LDAP group lookup fails for PrimaryGroup and one has to use LDAP Attribute PrimaryGroupID . KB2527 on Juniper support site will help for the LDAP Attribute setup. Thanks. ... View more

Auth support for Windows 2008 AD is in 6.4 R1 tentatively scheduled to release End of March. ... View more

What is the Software build you are running? Did you report the problem to Juniper Support? If not, please do. Make sure when you open the case, attach the system snapshot which should tell us which process is consuming the Memory. Attach the user access logs, Admin logs and Events logs. Thanks. ... View more

The trace suggests User is not member of group 'iveadmin' . If the user is, can you check if the iveadmin is a Primary Group for this user, Can you make some other group a Primary group and try again? Thanks. ... View more

For AVG 8.5, Please file a support ticket. ... View more

ESAP 1.4.7 has fixes for NIS AV and FW. For Non XP 32 - bit systems though: 7. The Anti_Virus Check for Norton Internet Security 2009 (v16) and Norton AntiVirus 2009 will not be correct on a non_XP_32bit machine with security centre disabled. Workaround: If the security center service is disabled and you are on a Non_XP 32 bit machine it is required that the Early Load of the Auto_Protect feature be enabled. This feature can be enabled by opening the AntiVirus or Internet Security Options, selecting the Real_Time Protection tab, and under Auto_Protect, you will find "Early Load". ... View more

Meh: What is the version of ESAP Activated on the IVE? Thanks. ... View more

Rui: 6.4 is tentatively scheduled for end of March 2009. ... View more

AD 2008 support will be in 6.4 version of SA. For current builds try setting up LDAP instance pointing to AD 2008. I have seen that work. ... View more