About Luca_

Luca_ · ‎07-26-2011

We have three Steel-Belted RADIUS servers running in our network. Currently for them to replicate, i need to go to the primary and publish the config. Is there a way to get them to automatically replicate?

Luca_ · ‎08-31-2010

Can someone please explain to me the difference between a role and a profile on a SA2000? From what i can see they essentially do the same thing..... The difference perhaps is that a role is configured per user, and a profile is more like a global object than anyone can use? Is that about right?

Luca_ · ‎07-04-2010

The error that appears on the clients screen is 'The remote connection has timed out. Please try connecting to the remote computer again" There are no logs showing up anywhere on the portal, is there some advanced logging or debugging i can do? I have done a policy trace but this does not show any connection problems. I dont think its an ACL policy. For the ACL i have specified 10.0.0.0/8:* The IP address i'm trying to connect to is 10.132.200.11 so the above ACL should permit the traffic I have also tried just putting a * in the ACL but this also does nothing. As mentioned its the firewall on the other side of the SA2000 shows no traffic from the SA2000 attempting to reach the terminal server.... EDIT: - Just did some more testing, i have the terminal services link working now, but not the web bookmark. I did a netstat -n on a test PC after clicking on the weblink and noticed that there was a connection to the web link IP address from the client. So the requst for the website is not comming from the SA2000, rather the client is opening it up link a normal page.... why would that be happening?

Luca_ · ‎06-28-2010

Thanks for the reply, still can't get it to work. I'm trying to get a single terminal services session working..... Here is what is configured so far A terminal service session configured under users roles Under Terminal Services access control policies i have added the IP address of the server configured under the user role, and applied the policy to the appropriate role. When the user logs onto the remote access portal, the link to the server appears, but when the click on it, it just times out. I have checked the logs on the firewall which the SA2000 sits behind, and there is no attempt to make a connection from the SA2000 to the terminal server. The firewall shows no logs at all. When i connect to this same server under a network connect policy it works fine. Running version 6.5R1 (build 14599)

Luca_ · ‎06-27-2010

Hey, On our SA2000 i have configured a few roles with web book marks and terminal services links. However when remote users click on the links they just time out. However if I use a network connect policy, and try to access the same bookmarks and terminal servers it works. There are no firewalls or anything else blocking the traffic from the SA2000 itself, the SA2000 can ping all the servers from the admin console. So why would network connect work, but other book marks not work? Thanks

Luca_ · ‎06-27-2010

Hello, When clients connect to our network connect policy the do not get assigned a DNS suffix. Thefore when they need to connect to a server the fully qualified domain name has to be used. The NC policy says to use the IVEs DNS settings, which has the DNS comane of ourcompany.local assigned, along with two DNS server. When a client connects using NC they can't resolve a hostname of a server unless they use the full name e.g. server1.ourcompany.local. Any ideas how i can fix this? Thanks

Luca_ · ‎06-03-2010

I have setup a Network Connect policy for some remote users, using a SA2000. I have noticed that when they connect their default gateway on the Juniper Network Connect Virtual Adapter gets set to 0.0.0.0 On a different SA2000 when people use network connect the default gateway gets set to the same IP as the assigned IP address. Any thoughts as to why 0.0.0.0 gets assigned? They can still access all the relevent servers so it does not look like its affecting anything. Im just curious.

Luca_ · ‎06-01-2010

Is it possile to have a network connect IP range that is on a different subnet that the SA2000's internal IP addresss? For example, say the SA2000 is 10.1.1.1/24 Is it possible to create a network connect profile that uses the range 10.50.50.0 to 10.50.50.255? I'm guess that the switch interface that this connects to will need to be configured as a trunk, and in the netscreen firewall a new zone/interface would need to be configured in the range. Anyone else has experience doing this? thanks

Luca_ · ‎05-30-2010

Hi, We have an SA2000 with about 76 different roles configured. I'd like to know if it is possible to see a report which shows the last time the roles were used. I basically want to reduce the amout of roles we have, and need to know which ones have not been used in a long time. Could this be done in NSM somehow? Thanks.

Luca_ · ‎05-26-2010

Is it possible to setup the SA2000 for 2 factor authenticaion without using something like a token? Can it be setup with local accounts on the SA2000, and then active directory authentication? If so how.? Any other suggestions for 2 factor authenticaion wiithout the use of a token?

Luca_ · ‎03-14-2010

We have an external company who has access into a few subnets of our LAN via a network connect policy. They have complained that when they connect via network connect they loose access to the Internet Network Connect Access Policies we have defined the two subnets they need access to on our LAN. I'm just not sure what Split Tunnel mode i should use. Currently the split tunnel mode is "Enable Split Tunneling with allowed access to local subnet" Is this the best way to configure split tunneling for this requirment? Does anything else need to be configured

Luca_ · ‎06-11-2009

We a SA2000 running software 6.5R1. We have a few terminal services session set up and i would like to know if it is possible for the terminal services session to launch with the /admin switch. This way the user will be taken to console session of the server. I have looked around in the SA2000 but can't find anywhere to add this option. Anyone know if its possible? Thanks

Steel-Belted RADIUS replication

SA2000 - Roles vs Profiles

Re: Web bookmarks & Terminal sevices links don't w...

Re: Web bookmarks & Terminal sevices links don't w...

Web bookmarks & Terminal sevices links don't work

Network Connect - DNS

Network Connect - Default Gateway 0.0.0.0

Network connect IP range

Report on roles

2 Factor Authentication

Split Tunnel problem.

SA2000 - Terminal Services Question