Is the ability to log resource policy access control available within the Juniper SSL VPN appliance? For example, if I have a Network Connect resource policy configured with Access policies that restrict the networks a specified role can access, can I have it log access that was subsequently denied by said policy? Detailed Rules (Edit) 1. Allow tcp://192.168.1.100:80,443, tcp://192.168.1.123:80,443, tcp://192.168.1.200:80,443 2. Deny tcp://192.168.0.0/16:80,443 3. Allow tcp://*:80,443 So here if I had a machine trying to access 192.168.1.150, it would be denied by line 2 above. And if that happens, I would like to know about it. But I don't see where I can have it log denied connections like that. It doesn't show up via the normal syslogs such as logins, logouts, etc. Thanks, -Ryan ... View more

Here's a question... how in the heck do you get a Windows Terminal Services bookmark to fallback to the Java client? The gotcha being that the bookmark is created by the user... The way I currnetly have the devices setup, users log into their SSL VPN portal, click on a terminal services link (created from their portal account), and connect to their corporate desktop. If they are on Linux/Mac, this doesn't work because it does not fallback to Java. I can make the fallback work if I create the bookmark under a terminal services profile, but I don't want to do that because then the whole role is going to see their desktop link. I only want each user to see only their desktop via the bookmark... and I don't want them to have to type in IPs... and I want the fallback to work. Ideas? ... View more

Hi All, I've been at this for a good amount of time and figured I'd share my solution with the community. There's a good amount of talk about what RDP client to use, the applet code to use, how to get full screen to work, etc. I've been through this forum over and over looking for solutions to the full-screen issue, but never found a viable solution. I came up with something using JavaScript that isn't a true full-screen implementation, but it does leverage JavaScript to obtain the source workstation's resolution which in turn passes that in the parameter to the RDP client. If anyone has a better way, I'm all ears. Last I heard, there's no full-screen switch via the param fields, which I'd totally dig. RDP Client I've had the most luck with Elusiva RDP since it supports various keyboard shortcuts that ProperRDP does not. I believe it is basically built from ProperRDP, which is built from rDesktop. I've also messed with JRDesktop which is far behind the prior. The Code <script type="text/javascript"> function getResolution() { var yourRes = screen.width + 'x' + screen.height; document.write('<param name="geometry" value="' + yourRes + '">'); } </script> <applet code="com.elusiva.rdp.applet.RdpApplet.class" codebase="<< CODEBASE >>" archive="JavaRDP14-1.1.jar" width="640" height="480" name="ElusivaRDP" align="top"> <param name="code" value="com.elusiva.rdp.applet.RdpApplet.class"> <param name="codebase" value="<< CODEBASE >>"> <param name="archive" value="JavaRDP14-1.1.jar"> <param name="cabbase" value=""> <param name="name" value="ElusivaRDP"> <param name="align" value="top"> <param name="username" value="<<USER>>"> <!-- <param name="password" value=""> --> <param name="Server" value="<<HOST>>"> <param name="Port" value="<<PORT>>"> <script type="text/javascript">getResolution();</script> </applet> I've seen various snipets of code that include the HTML, BODY tags, etc... but if you look at the actually end-result source code, they already build that around the applet import so it is not necessary here (I think how they build the page is totally ridiculous to be honest, but that's for another thread). Basically what I've done is create a JavaScript function that reads the user's screen resolution, and writes an applet parameter using the geometry name and a value of the acquired screen resolution. While this isn't a true full-screen result, it does a decent job getting close. At the very least, it resolves the Desktop vs. Laptop vs. Tablet issue of hard-coding a specific resolution. If anyone has anything that works better for them in regards to the full-screen issue, I'd be interested in hearing. Thanks ... View more