- Pulse Secure Community
- :
- About Toivo_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Toivo_
Contributor
54
Posts
0
Kudos
1
Solution
04-09-2014
02:42:PM
I once found a Juniper document suggesting this: launchctl unload /Library/LaunchAgents/net.juniper.pulsetray.plist
... View more
04-08-2014
01:12:PM
I opened a JTAC case for an official response, but the best I got out of the engineer currently is that they're aware of the issue and their security team is reviewing it.
... View more
02-28-2014
06:07:AM
I have a user that is getting the above error on Junos Pulse 5.0 on a Mac Pro running Mavericks.They do not have any third-party antivirus or firewall products, and have a Macbook Pro they think is set up identically where Pulse works fine. I've tried to search the KB and Google around, but haven't had much luck seeing this behavior documented anywhere for a Mac. Specifically, Pulse installs, but that error is produced when they attempt to establish a connection. I've had the user uninstall Pulse and NC and delete all the Juniper directories documented in the client side changes document. Has anyone seen this? Any suggestions what troubleshooting steps I could take?
... View more
01-14-2014
06:22:AM
We only tested with the https://ourvpn.ourdomain.ourtld URL, no differentiated sign-in pages. We did not have any host checker or posture checking at this test. Authentication is basic password/RADIUS. Amusingly, when using a web browser to log in, it still offers the standalone Pulse installation, despite having an in-box client. With the standalone client installed, it works. I'll go ahead and open a JTAC case to figure it out, thanks.
... View more
01-13-2014
11:10:AM
We're testing SA8.0R1.1, and using the Windows 8.1 built-in client and everything else seems to work fine, except the system (ping, IE 11) loses name resolution. Looking up names via nslookup still works, as long as we add the final dot "www.cnn.com." instead of "www.cnn.com" DNS appears only broken when the tunnel is active. The tunnel adapter does NOT show any DNS servers with ipconfig /all. Obviously, this is a show stopper. Has anyone else run into this? Any clues? (Aside from adding IPv6, the connection profile hasn't changed from a working setup. DNS is handed to the client via DHCP server, and "DHCP DNS Settings" is selected in the connection profile.)
... View more
12-10-2013
07:09:AM
This is helpful, since it's exactly the problem we face as well -- since Juniper seems in no hurry to make a Linux version of Pulse available (yes, we've talked to the account team and others), and now Mavericks only supports Pulse, we've had to split our client base. Unfortunately, depending on our users profile they may end in one of several roles (determining which virtual interface they're on, not really mergeable attributes), so it looks like we'll need to duplicate all of our roles now :-(
... View more
07-15-2013
07:40:PM
Thanks, that's what I figured. It has to do with compromised accounts. Since we do not limit maximum session duration, just locking the account allows someone to remain online if they established the connection before the compromise was discovered. (And yes, I realize this is asking to solve blatantly obvious policy/organization issue with a technical workaround.)
... View more
07-15-2013
06:38:AM
Our security group is asking me to provide them with an interface to our SA-6500s (7.2) to allow them to terminate sessions of given users. I went over the admin guide, but didn't see a documented way of doing this. Is any of you aware of a method, aside from the web GUI, for terminating an active session?
... View more
05-28-2013
12:03:PM
Has anyone attempted to get the Avaya 4610-series phone Remote VPN functionality to work with an SA series SSL VPN appliance? From my reading of the respective documentation, the Avaya only does ISAKMP/IKE/Xauth (i.e. not IKEv2) and the SA only does IKEv2 (not legacy IKE), but I'd love to be corrected on this.
... View more
02-21-2013
12:16:PM
Having requested this from our account team for years now, I think I can repeat the earlier statement someone made that Juniper appears to have no interest in supporting 64-bit Linux. The other pain point is the lack of Pulse client for Linux, so right now it appears there won't be any IPv6 support for Linux either, 32 or 64-bit.
... View more
06-28-2012
11:47:AM
I do. And as said, it doesn't return an error; the input boxes go away, and it just sits there without getting to the desktop. (Aside from the user confusion factor of having the same prompt for different credentials.) Just to add: The System log, Application log and Security log on the system show no entries at all corresponding to the login attempt. That's windows logging for you, I suppose. They show my previous and subsequent logins using the user tile, rather than the Pulse tile.
... View more
06-28-2012
06:58:AM
No solution here, but we'd like at least the the NC and Pulse connections as well. Right now, as far as we know, the only way to know how many users are connected is to log into the web interface of the box, and that's kind of ridiculous. (On the other hand, kudos to Juniper for easily giving you the MIBs for other stuff on the box.)
... View more
06-27-2012
11:45:AM
Has anyone else run into trouble with this? I see the tile, the connection is established (see it on the SA, IP assigned etc.) but the Windows login process (Windows 7 Professional) remains in the "Pulse is connecting to X" screen with a cancel button, and never proceeds to actually log the user in. Policy tracing suggests things are going just fine, session created, roles mapped etc. Incidentally, as far as I can tell, the user must select "switch user" to see the Pulse tile. Even if the option to start as part of the login process is selected if the user just uses the Windows default of the previously logged in user, the VPN never triggers. Is there a way to work around that?
... View more
09-19-2011
01:35:PM
@NULL wrote: Hi Jspanitz, the solution for you is probably to limit the Supported Antivirus Solutions in the HostChecker Rule. Have a Try and enable only 1-5 different Antivirus Vendors for Check. If you then can connect without any problems try to evaluate which Antivirus Vendors do get used most by your Workforce/Customers/Partners. So you can enable Check only on those few really needed Antivirus Systems, and your problem should be solved. regards NULL Not sure why the KB article number doesn't show up above, but I'm assuming the reference was to KB21443? Anyhow, do you know if it is necessary to have AV AND firewall selected, or will the issue appear when all AV are selected, but no firewalls? If it affects AV checks even without the firewalls, that's yet another major problem for us...
... View more
08-25-2011
10:23:AM
The upload speed issue only seems to occur when NC addresses are outside of the local subnet of the SA interface, and for some reason when using external DHCP the NC changes the netmask to a /32. There's no issue with DHCP per se (aside from an issue with the secs field which is being fixed), it's just a possible/likely cause to trigger the speed issue.
... View more
08-25-2011
10:12:AM
Very poor upload speeds when using NC on a mac, and NC addresses are assigned by an external DHCP server.
... View more
08-25-2011
10:10:AM
We were told that it would be in the works a year ago when we purchased the product. The new account team claims this was no true, but we're one more fairly large customer that has definitely requested it from two account teams now.
... View more
08-25-2011
10:09:AM
This is additionally ironic as we have a case open for Network Connect for Mac where Juniper claimed OS X Lion would fix it. If "fix" means "it's not supported, so it's not broken anymore" I suppose they did.
... View more
05-31-2011
01:09:PM
We've seen this, reverse lookup identified Verizon as the ISP. The user claimed they were in a wired office environment rather than on 3/4G. We never did get to the bottom of it, but enabled roaming for them. The IP's weren't even remotely close either.
... View more
05-23-2011
10:57:AM
Got help from Juniper TAC. Mac speeds being slow is a known issue, KB19197_. I'm not sure why I didn't find this during my search of the KB. The workaround with ipchains doesn't appear to stick, though, contrary to what the KB article states.
... View more
05-17-2011
07:24:AM
Just to clarify when I say unusable, doing the same file transfer without the VPN: 26 Mbps. With VPN: 500 kbps.
... View more
05-16-2011
03:36:PM
What happened with your case, out of curiosity? We're running 7.1R2, and just discovered Mac upload speeds on Network Connect are completely unusable.
... View more
01-13-2011
02:08:PM
Does JunOS Pulse support certificate authentication? I have a role into which users log based on their certificate alone, and which then auto-launches NC. When I try to auto-launch Pulse, it launches but fails to establish a connection with "Error 1302: Authentication not completed." I can't find any documentation explaining the error. (This is on a Windows 7 platform, with 7.0R4).
... View more
01-13-2011
01:03:PM
We too have been trying to find a way to give the user a clear visual indication that their NC connection has been successfully established -- directing them to a custom page would certainly work. I am, however, a bit unclear on how to do that. Any advice would be appreciated.
... View more
10-28-2010
07:17:AM
We have several clients that cannot connect to our SA-6500 via NC. The log shows TIME - SA-6500 - [xxx.xxx.152.60] user(DOMAIN)[ROLE] - Remote address for user USER changed from xxx.xxx.152.60 to xxx.xxx.167.32. Access denied. We do not have any form of NAT or load balancing in front of our SA's; there are two in an active/passive configuration. It looks to me like the client's end has some form of NAT that is mapping different connections to different external IPs -- though the IPs are pretty far apart, so it's not just a small pool of external IPs either. Has anyone seen this behavior, know what typically causes it, and how to work around it? The clients affected by this aren't particularly technical and we haven't been able to get hold of any technical contacts at the remote networks yet.
... View more
10-21-2010
07:35:AM
We have a similar problem. Outside consultants require the use of NC to get to our systems, and they're complaining that another one of their clients also has a similar requirement, but runs a different code release, so they have to constantly upgrade/downgrade their clients to be able to connect. I'm not aware of any way to get around it, but is there any sort of solution for people who do have to connect to multiple SA appliances that are running different code releases?
... View more
10-19-2010
11:51:AM
No, sorry, no solution. Let us know if you come up with one, though!
... View more
08-04-2010
07:27:AM
We have a client using our VPN who swears he has MS Forefront running. Our AV HostChecker policy is set to accept any supported product. MS Forefront is in the list, but listed as version 1.5.x (ditto for 7.0). I understand that as of last year the Forefront product is in fact at version 2.x... Does anyone know the status of MS Forefront Client Security support on the SA/IVE Host Checker or have similar problems?
... View more
07-12-2010
10:56:AM
I understand that Pulse is client software, but in IVE 7.0 under roles->NC there's a pair of radio buttons for selecting NC or Pulse for client connections; in 6.5R4.1 there isn't. I could see that connecting to 6.5R4.1 with a separately downloaded Pulse client might just be an undocumented feature, but the other thing missing from that IVE screen is the "JunOS Pulse Settings" tab -- would the Pulse client for 6.5R4.1 just use some default settings that aren't changeable, unlike 7? Or is this just for the 6.4 train, not 6.5? Or, possibly more likely, is there something obvious I'm missing?
... View more
07-02-2010
01:10:PM
User error, as usual. Packet capture clued us in on random RST flags, which clued us in the fact that someone had reused one of the test-IVE's VLAN IPs, and the duplicate host would, whenever it won the ARP contest, reset the connections. Lesson on documenting setups, even in lab environments. :-) Thanks for the help!
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
