Thank you microsoft for the wonderfully confusing world of windows 8.     Juniper will have to release a version of junos pulse that can be installed from the windows store.   Microsoft does not allow you to install anything through IE 10 on windows RT.     ... View more

So the impact to your end users depnds on how the load balancer is configured.   User information should be synced between the two active/active sa 4500 boxes.     So your users will only experience downtime for the time it takes for the load balancer to detect that a node is down and start forwarding traffic to the up node.   In my experience most users will not notice. ... View more

oh yeah, and this is in the wrong forum. ... View more

Since your srx does not have a public IP address you will have to use aggressive mode negotiation for the tunnel.   ... View more

Unfortunately you will have to upgrade to 7.2 in order to use the host checking functionality on the iPad...... And you will have to wait for apple to approve junos pulse 3.2 for the iPad. ... View more

If I'm not mistaken most cell phones will disable the wireless radio when the device is asleep in order to save battery life. ... View more

I have no problem connecting to 6.5r9 with the 2.04.10515 client. What problems are you seeing? ... View more

Also remember that the license cost for secure meeting is a one time cost. One of the really nice features of secure meeting is the remote support option. Our support folks use it quite a bit to save an office visit. ... View more

You can do it on the load balancer if it can export the private keys. However, you cant generate the cert on the SSL VPN box because you cant export the private keys. ... View more

You will need to generate the private key and CSR on a different machine...... A linux box will work the best. The CSR should be for whatever the load balanced DNS entry is(i.e. vpn.company.com). The cert will then be installed on each of the VPN boxes AND the load balancer(if you are terminating SSL on the hardware load balancer). ... View more

This release is a total let down. I'm not sure why Juniper even bothered to release it. If you have the browse functionality enabled then there is not additional functionality added from the "client". The iOS client is infinitely more useful than the android client. Until the android client gets vpn capability there is no point in installing it. ... View more

Out of curiosity, what is the need for this? ... View more

remember that the call manager only handles call set up. You will have to allow your phone access to the other phones on your network. ... View more

That is correct. If you want to run active/active you will have to generate the private keys on another system(linux/unix box) and then import the certs into both of the SA boxes. ... View more

There is a very good reason for the SA to send the DHCP release packets. What happens when the client times out? What happens when the NC doesnt disconnect the session cleanly? ... View more

Perhaps there is no pulse for iPhone documentation because the software has not been released yet? I'm not sure whey folks think that the pulse software should be out the second apple releases a new version of their OS. Are you equally upset that juniper does not support windows 8 yet? ... View more

I'm disappointed to hear that the Hob applet does not work for user created bookmarks. What is the point of including the Hob applet if it only works for quick launch? ... View more

I've heard rumors that it will be in the 7.0 release.......... And the tecnology will be provided by hobsoft. http://www.hob-techtalk.com/2010/03/08/our-experience-working-with-ssl-vpns-and-the-integration-of-hoblink-jwt ... View more

I would not rely on the browser userAgent if this is a secure resource. It is trivial (and common) for users to change thier userAgent string. ... View more

You can set a network connect access policy that limits the public resources the user can get to. This has to be done by IP range and not DNS entry. However, if all you are trying to do is keep users from using your internet connection to get to the outside I would look into configuring split tunneling in the network connection profile. ... View more

Unfortunately the problem is getting worse. The box has not been able to keep running for more than 7 days at a time, most of the time the box doesnt stay up for more than 48 hours. The cgi-server process crashes every 2-4 hours and the box hangs every 2-6 days. It is so bad that we are planning on pulling the vpn from production and scrambling to find a replacement. I'm not looking forward to more eval boxes............. Our account manager has tried to get the case escalated but so far nothing. Anyone have any suggestions for replacements ? The sad thing is I have had nothing but great experiences with Juniper screenOS devices and JTAC for ScreenOS. In fact the purchase of the ssl vpn product was partly based on the great experience I have had with JTAC. ... View more

I assume you are using the Network Connect client and not core access. Are you using ESP or SSL for the transport? Also, what encryption algorith are you using? ... View more

I do have a jtac case open, for the past 3 weeks. I am working on escalating the issue, but I'm not hopeful for a speedy resolution. Unfortunately JTAC for the ssl vpn doesnt appear to be as technically proficient as JTAC for screenos products :( ... View more

policy tracing is off, as is debugging... However I do have quite a few automatic snapshots of the cgi-server process. ... View more