- Pulse Secure Community
- :
- About PMELJK_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
PMELJK_
Occasional Contributor
7
Posts
0
Kudos
0
Solutions
06-09-2015
10:53:AM
I guess that wouldn't work... on Macs, Pulse can only check user certificates.
... View more
05-20-2015
10:58:AM
Have you tried making a Pulse connection set with the "Connection is established:" option "Automatically when the machine starts. Machine credentials used for authentication." (3rd) selected, and then authenticating the machine cert. against a certificate server?
... View more
05-20-2015
09:13:AM
I've opened a case ( 2015-0518-0788 ) on this. So far the word is, machine auth. using just AD (machine name and password) does not work. Checking a machine cert, as opposed to a user cert., works with host checker but on Windows only (we have some domain-joined Macs as well that I want to have machine auth. done on before allowing them VPN access to the LAN.) I have a call later today to discuss this, so I'll report what I find and the results of my testing (credential provider etc.)
... View more
05-15-2015
02:18:PM
Yes, and general that is. I've also looked at http://www.juniper.net/techpubs/en_US/junos-pulse4.0/topics/concepts/a-c-c-sa-machine-auth-overview.html -- not to mention the Admin Guide and Pulse manual. I'm getting an error with machine name/password, error 1319 on the pulse client, and in the SA log " Active Directory authentication server 'Windows servers-AD type' : Received NTSTATUS code 'STATUS_WRONG_PASSWORD' ." Seems really odd to get this, anyone seen it? The documents say: *authentication server used by the Pulse connection must be Active Directory/Windows NT for machine name/password authentication *endpoint must be a member of a Windows domain *the machine credentials must be defined in Active Directory (maybe this needs more explanation?) *Pulse connection must be configured so that no prompts are presented during the login process which seems pretty simple. Anyone have a working system like this?
... View more
05-08-2015
12:33:PM
I'm testing VPN setup on a MAG2600 with SAS, then moving this to a MAG6611. I'm having trouble getting machine auth. to work. Currently I have radius to a 2008R2 NPS server working to create tunnel, with user auth. and Framed-IP-Address IP assignment. I can't find any guide to getting machine auth. to work this way even though "http://www.juniper.net/techpubs/en_US/sa7.4/topics/concept/secure-access-machine-auth-overview.html" states it can be done. In a nutshell I need to: Verify the client PC Assign static IP address for that PC Log the user in Thanks, Jon
... View more
05-08-2015
12:14:PM
Does anyone have a comment on how to config. this? I'm looking into machine auth. solutions as well. Thanks, Jon
... View more
05-08-2015
11:23:AM
I'm wondering as well. Are your Macs in the domain, with a product like Centrify, so maybe you can issue them certificates? You could do a realm or role cert. requirement. Also, for your PCs, are you assigning IP addresses from a pool or do you have a method of assigning a constant static IP to each machine? Thanks
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
