We have two distinct sets of SA4500 A/P clusters. One is the "main" cluster, and the other resides at our datacenter and they both have the exact same release and build of firmware. I am experiencing an issue when I attempt to connect to the datacenter cluster using the client from the main cluster. Is this a known issue? If I take a fresh laptop and point it towards the downtown cluster it connects fine. If I take a laptop that has connected to the main cluster and then try to connect to the datacenter cluster it hoses Network Connect and I get a nc.windows.app.23704 error message. Have I done something wrong or am I trying to make a round peg fit into a square hole? This is an issue as the datacenter cluster is a fail-over site of sorts, or for those days when we run high in the license count on the main site. Any insight or input would be helpful at this point. Thanks!! ... View more

We have a SA4500 cluster (active/passive) deployed that is currently running 6.5R1. We have reached a point where we need our Network Connect users to either A: get their DHCP leases from an internal DHCP server (InfoBlox) or B: for the IVEs to popoulate the internal DNS devices with the users' info. Any ideas? The "A" option appeas to be a dead end. Currently we give IP addresses from specific DHCP ranges based on role memberships, and those ranges are allowed/denied to certain portions of he network by the internal firewall. EX: A user that gets mapped to "corporate" can get to our Exchange server, intranet, etc. whereas a user that gets mapped to "production" gets an IP that allows them to the production servers in the datacenter. So not only do we need to leverage the internal DHCP server, we also need to pass a variable to said internal DHCP server so it knows which IP pool to grant the user a lease from. I've asked our regional Juniper engineer and he doesn't know how to even begin to set this up. The "B" option is less than ideal, but if we can figure it out, it will suffice as a work-around. We need the IVEs to send registration information to our internal DNS (also handled by the InfoBlox device). This way when our corp anti-virus says "username-xyz" has an issue, they can deal with it without pulling me into the fray to try and track down who the user is since they're connected in via Network Connect. It goes beyond AV- there are a lot of other instances that would benefit from Network Connect users actually registering with our internal DNS. So has anyone ever set something like this up before? Are there any HOWTO guides laying around that detail how to set this up? This is very quickly becoming a major PITA and we need to find a solution soon. ... View more

Hi, I've had a look at the the drive mapping through WSAM PDF and we're still having issues. A bit of background first... Clustered (A/P) SA4500s, running 6.5R1 (build 14599). We run Outlook/Exchange and a number of our users have PST data files out on our NAS. When in the office, a user boots his/her machine and part of the login process is a VB script that maps the network drives. I have added NetBios as a supported WSAM application, and added the server holding the network drives in the WSAM allowed servers. I have also added two of our AD servers to the "allowed servers" since the VB script that does the drive mapping is located on our AD servers. So here's the issue... 1) I have set the UNC path to the session start script in the "Options" section of SAM. It never loads/works. I don't see any errors, but the drives are not mapped on remote machines using SAM. 2) It takes ages for the WSAM icon to turn blue. I'm guessing that this is because it's waiting for the script call to time out? 3) Our users are getting this annoying pop-up from Outlook since it cannot connect to the network PST files (the root issue from which all of the others have arrisen). So you see- if the drives mapped via the script, then there would be no PST error. So how do I get this blasted VB script to launch correctly, which might very well resolve the slow-load issue as well? When you right click WSAM and go under the details tab, you see the correct servers (two AD servers and the network file server) and applications defined (NetBIOS and Outlook.exe). I know this has to be one or two simply changes, but so far I haven't been able to figure them out!! Any help would be appreciated. :) ... View more

My company is firewalled off from the parent company, and connected over a site-to-site VPN. In order for thier users to access our SSL VPN for SecureMeeting, we need to know what ports are used for SecureMeeting and all of its features (Desktop sharing, etc.). They run a webwasher proxy on their end and it is causing some issues when they attempt to connect. In order to resolve this their firewall team has requested a list of SecureMeeting ports. I've poured through Google and haven't found anything. Does anyone know where I can find this info? ... View more

We use a project management tool called Clarity that does everything 80/443 *except* there is a link within the page that calls up/launches a local app on the user's computer for syncronization. Is there a way to allow the webpage to call the local app using only a web bookmark? Or am I going to have to config IE for WSAM to allow this? Would WSAM even be a valid solution? I've tried doing some searches but couldn't turn up anything. If this has already been answered in another thread cna you post up the link? Thanks! ... View more