- Pulse Secure Community
- :
- About groque_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
groque_
Occasional Contributor
14
Posts
0
Kudos
0
Solutions
06-12-2009
08:16:AM
Thanks Gamer004!
... View more
06-11-2009
11:08:AM
Hey Crypto I forgot to add this. When I enable GINA to launch Network Connect during log on it works fine! BUT When I try launching Network Connect manually (going to the website, logging in and launching) it executes the SLOGIC.bat but it doesn't map the default profile. This was when I was using LDAP as my authentication server I switched it over to Active Directory thinking that when I log in with my username and password it not only logs me into the network but also established like a domain logon. Is it possible to run the slogic bat and map the drives by launching network connect? and in regards to the wait.bat is that a batch file that you manually created?
... View more
06-11-2009
11:02:AM
Thanks Cryto for the response! I assume you used script logic with SSL vpn's before and got it to work?
... View more
06-10-2009
03:45:PM
Hi all, I just wanted to know if anybody on this forum has any experience getting script logic, desktop authority or any other "script management" program to work over when a user initiates a Network Connect Session? I almost had it to work with Script Logic. I configured it on my DC set Network Connect to initize SLOGIC.bat upon startup and it worked great! but it couldn't assign me my default profile. I am pretty sure the SSL VPN is causing this because I am not actually logging into the domain (LDAP is used as my authentication method). If anybody has gotten this to work please let me know, or if you have any recommendations on a script management application that I can purchase that works well with Network Connect that would be great!. Basically my the users in my domain have their own specific network drives that need to be mapped when they log in. I use script logic to map the network drives for my users. Cheers
... View more
06-09-2009
05:29:PM
Hi all, I got network connect to work today but I don't think I got it to work properly. When I connect and launch the client I get put on the 172.16.99.0/24 network (network assigned to my DMZ port). I can ping devices in the 172.16.99.0 network but I cant ping any devices that are located in the trusted zone. For example my LDAP/Radius server is located in my server VLAN (172.16.50.0) the IP address is 172.16.50.1. When I VPN in my LDAP server can ping my computer but I cant ping the LDAP server. When I do an IPCONFIG I do not see a default gateway all I see is my IP and subnet. I did enable split-tunneling but when I do a traceroute to 172.16.50.1 its going out to my ISP not to the GW 172.16.99.254(IP of the SSG340 DMZ port). I checked my policies on my 350M and I have a policy which allows the DMZ access to the Trusted Zone and vice versa but I still can't ping. Am I missing something here? I am not to sure if the gateway is supposed to be blank this is my first time configuring remote access VPN. Thanks for the responses. Cheers
... View more
06-09-2009
11:02:AM
Thanks Keith, I had the same issue I juse use the attributes instead of the actual groups and it worked!!.
... View more
06-09-2009
08:39:AM
Thank you I mispelled CN=users (i just had CN=user before) Thanks ALOT!
... View more
06-08-2009
05:36:PM
Hi Kevin, 1. When I saved my auth server definition I get NO errors, I used to get invalid DN and filter errors but after I got an LDAP browser everything was good. 2. LDAP server is defined as AD 3. I am not to sure what you mean by going into realm question. Maybe this is what I am doing wrong can you please elaborate on this step 4. Under role mapping I don't see anything under available groups and when I go into my server catalog and search for groups I don't see anything and I don't get any error messages
... View more
06-08-2009
03:22:PM
Thanks for the advice but unfortunatley it didn't work. When I try to do a normal search with my Base DN DC=ELAB,DC=LOCAL and filter CN=* nothing comes up. My groups are setup as Security -> Global. I tested it with usernames for example I made a username E and mapped it to a group with no network connect and made a user with J with network connect. When I log in with the different users the functionality with both work. Any other suggestions?
... View more
06-08-2009
02:38:PM
Hi all, I finally got LDAP working with my SA! but now I want to add role mappings to specific groups in Active Directory. For example I have a group VLAN 10 - E access, which is located under CN=user,DC=elab,DC=local. So I set my Group membership like this Base DN: DC=elab,DC=local FIlter: CN=<groupname> Member attribute: blank Query attribute: blank Nested Group Level: 0 Nested Group Search: Nexted groups in Server catalog is checked. When I go into my Server Catalog and try to search for a group for matching DN's I get nothing. Is there something I am doing wrong here I am pretty sure everythign is setup accordingly. I installed LDAP browser and everything looks ok. Thanks for the responses
... View more
06-08-2009
12:44:PM
Thanks for replying. I forgot to setup the connection request policy is that done through the sa or ias?
... View more
06-08-2009
10:11:AM
Hi all, I am trying to setup Radius as my main authentication server. I configured everything on the SA and IAS side both devices can talk can communicate but when I try to log in with a user the SA denies me access. When I check my Event Viewer in IAS it shows that the user E tries to authenticate to the domain but was denied access. This is the error message I get. "The user attempt to use an authentication method that is not enabled on the matching remote access policy" The policy name is VLAN 10 - E access. I enabled NAS-Port-Type matches for VPN, Wireless and Ethernet and my authentication methods are MS-CHAPV2 and unencrypted. I tried setting it to just unencrypted but it still didn't work. I am still new to the SA device and Radius works fine for wired and wireless authentication but I can't get it to work for remote-access VPN does anybody have any idea what I am doing wrong or have any other suggestions. Thanks all Cheers
... View more
06-05-2009
05:58:PM
Hi all, I just got my SA 2000 demo unit from Juniper. This is my first time working with an SSL VPN device I was wondering if it is possibile to assign IP addresses based on groups (sort of like Radius assigned VLANS). For example I have my auth server pointing to my Radius server. I have 4 different type of VLANS Vlan 10 - E 172.16.10.X Vlan 20 - J 172.16.20.X Vlan 30 - S 172.16.30.X Vlan 40 - P 172.16.40.X Is it possible to assign the address range listed abobe to the users that VPN in (using network connect). I heard thatt the SA doesnt support VLANS but is there any other way to do this? thanks for the responses cheers
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
