Hello, I have two separate SA6500 active/active clusters, and need to apply the same certificate to both. We know this works because we currently use a single certificate on both. I believe that we were in a single cluster configuration when this was first set up so it was automatically propagated. I have installed a new 2048-bit cert on one cluster and it works fine, how ever I can't figure out how to apply it to the 2nd cluster. If I do another CSR, it of course does not match the cert and fails the import. If anyone can help with this it would be greatly appreciated. dfry ... View more

Greetings All, We have a 2-node SA6500 cluster that was having problems communicating with Terminal Servers over a fast (OC12) WAN link. We changed the MTU on the internal Juniper interfaces from 1500 to 1380 and this appeared to correct the issue, however a couple of hours later we started to have major problems with about 50 users on the system. We noted heavy (200+Mbit) traffic on the internal interfaces and around 20% CPU utilization, both far higher than we had seen before. The cluster went up and down and some users got disconnected. When the MTU was changed back to 1500 everything returned to normal fairly quickly. What did we do wrong? Has anyone run into similar problems? Please advise. Thanks .. Dan ... View more

Hello All, I'm getting the following error quite often when I use external DNS round robin to load balance between 2 SA6500 clusters at different sites: "Juniper Terminal Services client session has timed out. Please log on to Secure Gateway again" We're running 6.5R2 and using Brocade load balancers in front of the 6500s After initial token authentication, you can begin to launch an RDP session, but then get the error. Everything works just fine when using a single DNS reference pointing to the Brocade VIP at either site. Can anyone help with this? Please advise. Thanks .. dfry ... View more