About racetiger_

racetiger_ · ‎08-25-2009

Thanks Ken, sounds like it's worth doing some more rounds of testing with this!

racetiger_ · ‎08-25-2009

Nice with a howto for citrix but is anyone able to help me out with my initial question - i.e. redirecting to an internal OWA with form post SSO immediately upon successful login? I still cannot get it to work...

racetiger_ · ‎06-28-2009

Hi everyone, I have a bunch of users that wants to be able to get direct access to their webmail upon successful login to the SA. That is, no menu presented and with SSO login performed. From what I can see, it's not possible to use a web resource as the starting page. If I specify the internal URL to the OWA resource (e.g. https://exchangeserver.internal.company.com/owa/ ) I simply get redirected to that URL without any rewriting activated, which of course will not work. Could anyone confirm that this is not possible, or even better just describe how I could configure it! ;-) The web resource I want to use is Outlook Web Access 2007 with remote SSO enabled. We're using SA2000 with IVE OS 6.4r1. Thanks for any help!

racetiger_ · ‎04-23-2009

Hi sourherring, First of all, this forum addresses SSL VPN and not IPSEC VPN's in FW's so your post will only reach a fraction of your intended audience. Anyhow, the tunnel spec on the SSG devices relates to the number of simultaneous tunnels you can create, regardless of the type and amount of traffic sent through them. In your scenario, you will use one tunnel in each device only. You would do fine with two SSG5's, or perhaps SSG20's with ADSL PIM cards if you would like to get rid of the existing modems at your customer sites. The SSG's have no "extended" license AFAIK. Best regards, /mk

racetiger_ · ‎03-19-2009

Wouldn't it be possible to use variables in the bookmarks just as you can do with <USERNAME> when providing a File Bookmark for a user home directory? Only problem would be to find out what variables can be used in bookmarks. I haven't found any compilation of codes and variables available for different places in the config.

racetiger_ · ‎02-25-2009

Hey, Best would be to use client certificates but if you settle for checking the registry you can read the domain name from HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Domain It contains the FQDN as a string, e.g. "redmond.corp.microsoft.com" Might be other places as well but this is the one I use. /mk

racetiger_ · ‎02-23-2009

"Juniper's SSL VPN solutions use SSL, the security protocol found in all standard Web browsers. This eliminates the need for client-software deployment, changes to internal servers and costly ongoing maintenance and desktop support. Juniper SSL VPN Secure Access appliances combine the overall benefit of a lower total cost of ownership compared to traditional IPSec VPN client solutions with unique end-to-end security features. Enhanced remote access methods enable the enterprise to provision access by purpose for virtually any resource, including those that are jitter or latency sensitive." http://articles.techrepublic.com.com/5100-22_11-5647244.html

Re: Use a web resource as start page?

Re: Use a web resource as start page?

Use a web resource as start page?

Re: Route-Based Site-to-Site VPN License Requireme...

Re: need users to be presented different URLS base...

Re: Host Checker to check remote machines for doma...

Re: SA 6000