- Pulse Secure Community
- :
- About Screenie_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Screenie_
Contributor
28
Posts
0
Kudos
4
Solutions
02-01-2014
05:51:AM
Hi, Basicly you could start with reading about appsecure. If you're looking for how to configure it, the security configurations guide is a good startpoint. http://www.juniper.net/techpubs/en_US/junos12.1/information-products/topic-collections/security/software-all/security/junos-security-swconfig-security.pdf part 11. After you created working rules based on ip make a connection to the uac for the policy you want and start using source-idendity. You then can apply policies to users in specific UAC roles. Read here about configuring AUC to work with SRX http://www.juniper.net/techpubs/software/uac/4.2xguides/j-ic-uac-4.2-srxsolution.pdf Greetings, Michel
... View more
03-10-2013
03:06:PM
For L2 enforcement you can use any 802.1x speaking device, as long as send the attribute back. For L3 you can use either ScreenOS device or (I would prefer) SRX devices.
... View more
03-01-2013
02:03:AM
http://www.juniper.net/techpubs/software/uac/4.1xrelnotes/j-ic-uac-4.1R1-b17057-supportedplatforms.pdf ?
... View more
03-15-2012
03:43:PM
Isn't that the case very often: it depends?
... View more
02-25-2010
11:12:AM
You can enable monitoring on phase II. On one side with rekey. This will keep the vpn allways up.
... View more
01-28-2010
09:15:AM
We also use rapidsll, never a problem!
... View more
01-04-2010
03:00:PM
For ScreenOS Firewalls (SSG, ISG) there's a read write admin who can do allmost as much as root and a read-only admin. For JUNOS based firewalls (SRX, J-series) you can define user classes with speciffic rights.
... View more
12-29-2009
08:14:AM
You configure the policy role based on the IC, like a SSL-vpn solution. The IC can push a policy to the firewall allowing this traffic with IC-authentication on that policy. Only when the user is authenticated the policy will allow the traffic for that session.
... View more
12-26-2009
03:33:PM
The policy would come from the IC in this case! There's just one polcy in the firewall allowing authenticated user access. The IS does the authentication, most commonly using a odysee access client on the end-user pc.
... View more
11-30-2009
01:59:AM
It's not mandatory! You can set-up in a one-leg setup. However it's common to "by-pass" the DMZ to internall segments of a firewall. Externall port in DMZ zone on firewall allowing only HTTPS to it and connecting internall port to trusted network. One-leg in DMZ has the disadvantage of allowing many protocols through the firewall from DMZ to internall.
... View more
11-04-2009
04:03:AM
You can go to system log/monitoring and look in the user acces log. If needed select logon / logof in settings or define a filter for this events.
... View more
09-28-2009
01:58:PM
You only can write a rule set from a zone to a zone once. If you need more rules add this in the same rule-set. Limits on the in the number of rules you'll find here http://kb.pulsesecure.net/KB14149.
... View more
09-27-2009
01:23:AM
But if you confugure the ssg to use the same internall dns server your clients use everything will work fine, won't it?!
... View more
09-25-2009
11:51:AM
Hi, why don't you use DNS and FQDN to list those spedifc hosts? When you create adress book entries that's possible.
... View more
06-22-2009
01:28:PM
I googled: this looks like a ready to use freeware http://www.softpedia.com/get/Security/Encrypting/LightCA.shtml or maybe you have a AD server in your lab? You can install a MS certserver on a AD server.
... View more
06-21-2009
01:06:PM
Easiest thing to do is download a simple (freeware) CA. copy root certs to IC and SSG and create two certs requests. Install the device certs and go with it. ( check this http://www.netcraftsmen.net/welcher/papers/certauth01.html ) Message Edited by Screenie on 06-21-2009 10:06 PM Message Edited by Screenie on 06-21-2009 10:10 PM
... View more
06-02-2009
02:27:PM
Or, to look at active VPN sessions: get sa active.
... View more
05-18-2009
02:11:PM
Hi, Did you read in this manual http://www.juniper.net/techpubs/software/uac/3.0xguides/530-029876-01-AdminGuide.pdf the passage authentication and directory servers, Configuring a radius server instance ? I think tis is the documentation you are looking for.
... View more
05-15-2009
01:27:AM
You could upload your own prefered telnet emulator applet. I don't know why you can't change setting, I certainly never had this problem.
... View more
04-23-2009
06:06:AM
On the 5GT there where two addional licenses: the plus for more users with base functionality and the extended for adding DMZ zone etc. SSG (5 and 20) doesn't have the user count restriction. You can add more functionality with the advanced license. Increases some counters (VPN tunnels, VLAN's see fact sheet) and add A/P NSRP to the box.
... View more
03-28-2009
06:20:AM
Nothing? Are you using spilt tunnel? If so, is traffic for those faling networks routed to the SA? Did you check the routing table on the client?
... View more
03-27-2009
11:49:AM
What does the logging show about the failing sessions?
... View more
03-27-2009
11:12:AM
Are other resources (network beyond the one you're connecting to) allowed by the resource policy? Is traffic forwarded to the right gateway? (netstat -r on your PC shows the routing)
... View more
03-25-2009
03:56:PM
Are the certs signed by ca your client has a trust relation with? Otherwise install the root cert from the ca in the client.
... View more
03-04-2009
02:25:PM
file path to deep: a symlink pointing to itself or something? Sounds like recursive dir entry.
... View more
01-10-2008
02:42:PM
You can check on registry values. So look for a value in your registry unique for the version. best regards, Screenie. Juniper Ambassador, JNCIA IDP AC WX JNCIS FW SSL JNCIP SEC ENT SP JNCI If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
