Cannot connect to SRX240H2 Dynamic VPN using pulse secure client on Win7 or Win2k8R2 Server. MacOS, Win8.1, Win2k12R2, Win10 clients work fine. The client shows error 1453, windows system log shows Secure Channel errors (event id 36874, 36888, 36887). The SRX httpd log shows "httpd: 2: "Comms Error", code 550: Communications read error". The SRX is reachable and shows dynamic VPN service page if accessing it from browser. JunOS 12.3X48-D65.1 Pulse Secure Client 5.3r1.0-b587 Any advice on debugging this will be appreciated. UPD: After digging into tcpdump I've noticed that Pulse Secure client on Windows 7 is trying to negotiate with SRX using TLSv1 which is disabled in latest JunOS, then it tries to failback to SSLv3 which Windows doesnt seem to like - in the end connection fails. Is there any way to force Pulse Secure to use TLSv1.2 on Windows 7? UPD2: Confirmed that Pulse Secure client uses TLSv1.2 by default on Windows 8 and 10. Why its behaviour is so different on Windows 7 and 2008R2?
... View more