ok did some digging it looks like you can use wrancid to get the xml config in but it is going to require some scripting. what you will need to do: 1. setup the SA archive function to scp the xml config to the rancid server 2. write a wrancid plugin to process the xml file into rancid and the cvs 3. bash script to rename / delete the file from the upload directory after the only hard part would be the wrancid plugin. I am going to give this a shot next week as we also run rancid for the rest of our network devices and it would be nice to get the SA in also and have the config diff'ed and sent out also ... View more

Agreed it is best if the SA is external to get a cert signed from one of the root CAs that way it is trusted and does not throw any warnings on end user systems. (being how picky browsers are getting now and days, thou this is for a good reason). Also remember you should import the Intermediate Device CA from whatever root CA you pick. There is a link to do this off the Device Certificate page on the CA ... View more

ya no luck on rancid to grab the config thou I use the archive function to export the XML config that way I can see what changes where made to the config files (as the full config exports are not readable). ya know now that I think about it there may be a way if you configure the archive scp function on the SA to send the logs to a folder on the rancid server you can then ingest the config into rancid... let me try it out and get back to everyone. ... View more

I have been using the Juniper STRM appliance to do most of our log running from the SA and it has been amazing. If is defiantly worth it to check that out. If you want to try out a core features of STRM (but not near ready for enterprise, as there is no support and features are way behind the production release) I would check out Q1 labs QRadar Log Manager FE. I use it as a lab logging engine but you can build and parse your logs pretty well with it. ... View more

I can tell you being the engineer that deployed that custom login page you found there is a lot of logic behind the page that gets really complicated (selecting the realm with the icons and processing the drop down and putting that in front of the username so that it is sent to the auth server correctly), that is all a pain. If you just want to have a custom login page with username and password fields and a submit button that is not bad. If you know html first get the site build as you would a normal site first. Then follow the docs Juniper has on custom login pages to add the correct form actions to submit the data. That is about it. I am actually working on a new custom login page for the company i am with now. Once I get the submit logic done I will post a stripped version (as it is an internal system) that may help you out. PS. Glad you thought the site was nice. I cant take credit for the html and look and feel thou. That is all another team :( ... View more