I opened a case and JTAC stated WIN 8.1 is still basically beta. MS will make changes. Juniper will not spend a lot of time until the final version is released. ... View more

I would not use win 8 on any code other than 7.4r4 ... View more

I have best performance set with 128 I get better throughpu than the line itself ... View more

do you have hardware accelator set for encryption. I had for a while and kept if off because of slowness ... View more

Overhead will cause this must unencrypt the packets. What strength do you have set. Do you have compressin set. I have the lowest one set and we sometimes do better with compression. ... View more

I would download the new installer service and put that on PCs. WIll work with old 6.5r3 code.   May also need to uninstall all old junper cliejt ... View more

if you give them unique IDs you can test for that ID range wiht widecards.   If id ABC* thne get this role whtcih has a range of IPS 10.10.10.10-20 IF id XYZ* then this role which ahs range Ips10.20.10.10-20 ... View more

upd port 4500 not open ... View more

That is why you select active sync only protocol from the sign in page. ... View more

We did browser restrictions for Junos Pulse. If yot turn on web requests you can see them. Turn off because they are big. JunosPulse(Version-* Allow   JunosPulseAndroidMozilla/5.0 (Li* Allow   Mozilla/5.0 (iPad* Allow   JunosPulseAndroid* Allow   JunosPulseiPhone* Allow   JunosPulseiPad* Allow   Mozilla/5.0 (iPhone* Allow ... View more

Not the cert expert here, but I think you did it backwards. If you generate on web first I think you can export into Juniper kater ... View more

From my testing, including host checker, I prefer 7.4 code. ... View more

I am getting ready to roll new code. I have the 7.4 code installed on my test and Sage VPN for the last month. Works great with NC and fixed OWA 2010 menu issue as well as Win 8 IE10 support. I have had the 7.4r41 code for 18 months.   Is there any reason why I shoud not roll this current code version/ ... View more

win 8 with ie 10 works fine with 7.4r1. Even host checker ... View more

-----Original Message----- From: Fernando Gont [mailto:[email protected]] Sent: Tuesday, February 26, 2013 8:00 AM To: Rex, Ronald Subject: Re: Juniper SSL code version 7.4r1 just posted   Hi, Ron,   Any idea of when this was released?   How does this software handle, e.g., bogus RA messages (e.g. including more-specific routes)?   Finally, is it possible to post this info to the ipv6hackers list?   Cheers, Fernando ... View more

is this WIFI or hard wire. I know PC has NIC settings. ... View more

In resource profile define the following Must select as attribute in AD. It is [email protected]   Username username <userAttr.userPrincipalName> Not modifiable   ... View more

I did a full network connect and could not believe how fast the downloads installed. It was a blink for the initial connect. I also have host checker. ... View more

I have 7.1r41 code and it allowed for now ... View more

Entrust does not want to set intermediate to trusted or true. Is there plans to once again allow on newer code? I have Error and it allowed for now. We are going to upgrade and it will fail. I have 2 years to get answer ... View more

I think I found answer in Forums   One error that we've noticed when re-importing the CA certificate that may have something to do with it: "ERR23036 Invalid certificate purpose on \'O=xxxx OU=xxxx, CN=xxxxx\" This issue was determined to be we did not have Basic Constraints:CA:TRUE in our CA. However after doing that it still was not working. After a long battle I ended up rolling back to 7.1 R1.1 and then upgrading back to 7.1 R2 with the new CA and NOW everything is working. The unfortunate part is no where in any documentation on the R2 upgrade does it say this CA requirement for basic constraints was added. Message 24 of 37(623 Views) Add Tag... 07-12-201104:52 PM Dear zanyterp, it indeed seems that our certificate is no longer working because we miss "Basic Constraits". Now the question : Do we really need to re-issue our certificate and thereby have to replace all our client certificates aswell ? This would mean a lot of unneccessary work for us. Or is there an other way ? ... View more

I created a b profile and 2010 autoconnected for me. You need to address teh cert error, should not get that ... View more

We use UTLRA DNS as our load balancer. If not see primary VPN then the pool has secondary VPN. We do not cluster we have individual VPNs up. ... View more

  In order to use Password Management, you may need to select the 'Authentication required to search LDAP' checkbox below and enter your LDAP administrator DN and password. Authentication required to search LDAP Admin DN:   Password:     Finding user entries   Specify how to find a user entry       Base DN: example: dc=sales,dc=com * Filter: example: cn=<USER>     Determining group membership   If group membership is NOT reflected as attributes of a user's entry, specify how to find a group's entries. Note that these are default settings that you can override on a per-group basis in the Server Catalog.   Base DN: example: dc=sales,dc=com Filter: example: cn=<GROUPNAME> Member Attribute: Attribute used to identify members of a static group or groups to which a member belongs   Reverse group search Search starts from the member instead of the group Query Attribute: Attribute used to determine members of a dynamic group Nested Group Level: Maximum depth of nested group Nested Group Search: Nested groups in Server Catalog Faster, but less flexible   Search all nested groups Slower, but more flexible ... View more

saw this when CAS was load balanced in 2007. If we made the load active passive went away. We are ready to move to 2010. I will follow this post. ... View more

Do you use bandwidth managment or SSL Acceleration? Both have given me that type of problem in the past. I have both off and just rebooted VPN since it was up for 365 days, no other issues. ... View more