- Pulse Secure Community
- :
- About liukkma_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
liukkma_
Occasional Contributor
13
Posts
0
Kudos
1
Solution
02-07-2011
03:38:AM
There's some more information about upgrading in the 7.0R1 release notes: http://www.juniper.net/techpubs/software/ive/releasenotes/j-sa-sslvpn-7.0R1-releasenotes.pdf Based on that doc, I think you should be able to upgrade to the latest version directly. I upgraded my 4500 clusters few months ago (from 6.4R2 -> 7.0R3) and it went well without any troubles. You may want to clear the system logs (I cleared all logs..) before upgrade as it should shorten the time it takes.
... View more
02-07-2011
02:50:AM
Upgrading a cluster is quite easy, because it will automatically update both nodes one-by-one. No need to break the cluster nor update both nodes separately.
... View more
02-01-2011
09:20:PM
In case someone else is looking to change MAC or MTU of the virtual adapter, here's the answer from tech. support. This feature is not available anymore after 6.5 . =================================== As per the issue description, I understand that you don't find the Advanced tab on the NC virtual adaptor to define the MAC address manually from 7.0Rx. Currently the feature to define MAC address on Juniper NC virtual adapter has been removed from 6.5Rx and above of the IVE firmware. Starting from 6.5Rx and above you will not find the advanced tab on the NC virtual adaptor to define the MAC address. ===================================
... View more
02-01-2011
04:08:AM
Once again little problem with the Network Connect... I have few users who'd need to define a static MAC address for virtual adapter, but the Advanced tab just isn't there anymore?! It was there in version 6.4R2, but now it has disappeared from Network Connect 7.0R3? Can anyone advice how to change the MAC (or MTU) of the virtual adapter? Thanks much.
... View more
01-23-2011
11:31:PM
Allright, I think we found the problem and it was caused by AT&T Global Network Client installed on these computers. That client installs its own AGN filters and those somehow collided with Network Connect virtual adapter. AT&T client was uninstalled and Network Connect starts normally now.
... View more
01-20-2011
10:50:PM
Some of my users have problem with Network Connection 7.0R3. They can start NC once, but when they close the session and try starting it next time, NC just seem to hang (Launching Network Connect. This may take several minutes) and nothing happens even after 5 mins waiting. Only solution we have found is to uninstall/reinstall Network Connect client. Then they are able to open the session again once. Needless to say it's not very convenient to uninstall NC after each session. These are XP SP3 machines. Does anyone have suggestions to this problem? Many thanks.
... View more
12-02-2010
02:02:AM
Hi all, We're having problems with Host Checker (version 7.0R3) on some of our computers and it's really bizarre.. you see, we have 3 identical SA-4500 clusters implemented regionally. Host Checker rules are identical in each cluster. User having this problem can usually login through 1 or 2 of the clusters, but 3rd one (usually the one user should use...) won't work. User gets "You are not allowed to sign in. Please contact your administrator". Computers are XP SP3. I can see from policy trace that variable hostCheckerPolicy is always empty on these computers where it fails to run: Variable hostCheckerPolicy = (when logging in successfully, variable contains HC policy names) We've tried to re-install the client software (uninstall all using Add/Remove Programs, manually remove Juniper directories, clean cookies from browser (IE7/IE8), sign in again), but it does not fix this problem. Also, we've had this same issue with earlier version 6.4R2 also. I recently upgraded to 7.0R3 hoping that would solve the problem, but no luck. Is it possible that despite uninstalling like above, HC still leaves some files or registry entries that could cause this kind problem? Any ideas how to fix this? Thanks much, -Marko
... View more
05-10-2010
04:07:AM
Thanks for your advices, I think I just found where to configure this!!! It's the admin interface that made this tricky... you have to go to Network -> VLANs, click the VLAN name and then you have Virtual Ports -tab under VLANs.
... View more
05-06-2010
06:48:AM
Hi, and thanks for the advice. Perhaps SA-4500 is a little different, because I still can't find where to configure cluser VIP... When I go to Network -> VLANs, I have configured an IP address for each of the nodes in VLAN, can not do the same for the cluster (IP-address field is then grayed out and just says " Node-specific"). This is a real problem, because we are using NC on that virtual system and currently the NC pool is routed to the active node. NC works until cluster switches to another node...
... View more
05-05-2010
04:03:AM
Ok, I have a little problem and I hope some of you experts can help me with this... I'm running SA4500 cluster (6.4R2) and I'm now adding couple of virtual systems in to it. New virtual systems are in their own vlans/subnets, which are different from vlan where the (physical) internal interface is. I have these virtual systems up already and traffic flows in the vlans as planned.. but I how do I configure cluster VIPs for virtual systems?! Let's say I have root in addresses 192.168.100.1/24 (cluster VIP), 192.168.100.2/24 (active node) and 192.168.100.3/24 (passive node). Then I have a virtual system having 192.168.1.2 (active) and 192.168.1.3 (passive). I'd like to have 192.168.1.1 as a cluster VIP on this virtual system. If I go to Internal Port -> Virtual Port on root, click "New Port" and try to add 192.168.1.1 (cluster IP on one of the virtual machines), all I get is this error: Invalid IP "192.168.1.1", the IP is outside the ports network (192.168.100.0/24) on node [my IVS] My question is where/how do you configure cluster VIP for virtual system?! Thanks much.
... View more
03-17-2010
04:02:AM
In my case this seem to be the problem: >> IE thinks the cert is present, but it is not. Which means you can see a valid user certificate in browser normally, but you still get "Page cannot be displayed" error after blocking the Sign in -button. Only way I have found to fix this is to delete the existing user certificate from browser and then get a new one for the user. Everything works again normally after new user certificate is installed. It is a total mystery to me why this happens... I guess this could happen if user looses rights to the certificate store or something like that?! I have been searching for MS hotfix for this problem, but haven't been able to find one yet.
... View more
12-03-2009
02:57:AM
I have couple of end-users who get the usual "Internet Explorer cannot display the webpage" error right after clicking the Sign-in button on login page. For the rest of my users the login page works perfectly fine. URL in the address bar is https://<our ive>/dana-na/auth/url_default/login.cgi when the error message comes up. We have tried upgrading and downgrading IE on these machines (6, 7 and 8 tested), but no luck. Clients are regular XP SP2 and our SSL VPN version is 6.4R2. Any ideas?
... View more
12-03-2009
01:15:AM
6.4R4 has been out for some time now, so does anyone know if the host checker problems mentioned in this thread are fixed? I have some users having host checker issues and logs only show "no roles" with a mention of host checker failing for some unknown reason. Software version is 6.4R2.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
