Hi,   The supported platforms doc of Junos pulse 3.0x lists 7.1rx version as supported so you can run pulse 3.0 and connect to an SA running 7.1x but host checker will not work as pulse 3.0 host checker uses sdk's of 7.2x version   Please mark this as an accepted solution if this answers your query   Regards, Jay ... View more

Hi, Apologies for taking so long to reply. Many thanks for everyones help, please find answers to your replies below: 1) RDP is enabled on the machines that I am trying to connect to. I still cannot connect using RDP or any remote access tool and I cannot map drives etc. 2) How would I make the Network Connect policies bi-directional if that is the problem, I can only see a way of making them work in one direction. 3) When the user is connected using Network Connect I cannot ping the machine they are using froma command prompt on my machine. I can however logon to the SA2000's web admin and successfully ping the machine using the troubleshooting section. It seems that something is blocking the ping (or remote access tools) from my machine that isn't blocking traffic from the SA2000 itself. If I try to do a tracert to the machine the first hop is the SA2000 and then it doesn't get to the next one Thanks for the help again, I am sure that it is just something easy in the config but I cannot work out what is is. D ... View more

It won't be possible to have a list as you mentioned; but if there is an attribute on your auth server you can pull, you can do that (as several others mentioned) as the bookmark host. If you wanted a list, you could put all the servers in one role and then in the ACL use a detailed rule and define who is allowed and who is not (but this adds additional administrative overhead). You could do a resource profile for the computers and assign roles from there. ... View more

Thank you very much, this works seamlessly. No certificate issues too with the ActiveSync IVE. ... View more

As it is a test box I had applied the generic certificate to the external interface. If you want to keep the existing certificate you will need to create a virtual port on the external Interface and apply the new certificate to the virtual port. Your external DNS will then need to resolve to the address of the virtual port. ... View more

OK, think that I have figured out what the problem is - it seems to be something to do with our proxy server. Currently users have their IE pointing to a wpad file and are not able to change those settings. If I do a bit of tinkering and remove those IE settings so that they are not pointing to the wpad file and therefore not going through the proxy server everything works fine. I don't suppose anyone knows how to get round this do they? Many thanks, D ... View more