About dwoolley_

dwoolley_ · ‎04-25-2010

Rakeshb, Thanks for the reply... unfortunately this still isn't working for me... maybe I'm doing something wrong. I'm fairly new at managing this box so I'll restate what I'm trying to accomplish and what I've done thus far per your recommendation... All of our employees already use the ssl-vpn and have roles defined... when a user logs in he is mapped to roles based on active directory group. The roles simply define the menu items and ssl-vpn services that the user has access to. Our IT Helpdesk sends out an automated survey e-mail when a helpdesk ticket is closed... the e-mail has two links... one is to access the survey on our LAN... and the other is to access the survey from the Internet. The link to access from the Internet is the ssl-vpn rewrite link to the survey (ie. https://host.domain.com/survey/,DanaInfo=server.company.com+itqu.asp?icid=20210 ). When a user click that link, he gets the webportal login, then after logging in he gets the ssl-vpn menu... he is not redirected to the survey. I would like the the users to be redirected to the survey automatically. So in following your advice, I created a new role called "Customer Survey Role"... enabled UI Options and set the Custom Start Page to the url of the customer survey. I then went to User Realm and mapped a new Active Directory group to the Customer Survey Role. When I added myself to the new Active Directory group and logged into the ssl-vpn I got the new custom start page... this happens regardless of whether I click on the survey e-mail link or just login via the main ssl-vpn page. I only want the custom start page if I click on the survey e-mail link... if I just login normally through the main portal page I want to get my menu of apps. Is there any way to get this to work the way I want? Thanks again for the help! -Dave

dwoolley_ · ‎04-22-2010

Rakeshb, Thanks for the reply... much appreciated! Just had a follow-up question... the survey page is actually for our employees and everyone is already assigned roles and access the ssl-vpn for other applications. Won't this workaround affect the way the ssl-vpn currently works for them? If I assign them to this role won't they get redirected to the survey page every time they login after? How does the ssl-vpn know which role takes precedence? Thanks again for the help! Regards, -Dave

dwoolley_ · ‎04-22-2010

Hello, Our users access our Intranet from outside our network by logging into the SA2500 SSL-VPN and selecting the Intranet from the SSL-VPN menu. We have a customer survey link that we send out via e-mail... the survey page is just a page on the same server as our Intranet and we would like for the user to be able to click the link, get prompted for the SSL-VPN login, then be directed to the survey page. This is the way it worked with our old Nortel SSL-VPN and we accomplished this by providing two links in the survey e-mail... one for "in the office" and one for "out of the office". I've recreated the "out of the office" link to accomodate the new Juniper rewrite url but when the user logs in he still just get the menu and isn't being redirected. Is there a way to get this single survey url to redirect without affecting the way the rest of our intranet functions through the SSL-VPN? Thanks in advance for your help! -Dave

dwoolley_ · ‎04-22-2010

Thanks for the replies everyone. Resetting the IE Security settings fixed the problem on the particular machine I was having the problem on. One weird thing though... I didn't experience the problem on my computer even though I had the same security settings. Hmmm...

dwoolley_ · ‎04-07-2010

Hello, One of my users is unable to login to our SSL VPN with IE8... after entering his username/password he gets a IE error message stating "Internet Expiorer has closed this web page to help protect your computer". I found this KB article regarding adding an exclusion to DEP... http://kb.pulsesecure.net/KB15191. Unfortunately, I could not add Host Checker to the exclusion list as the Host Checker files are not yet on the computer. I tried manually copying the Host Checker files to the proper directory on the computer, then added to the DEP exception list but I still get the same IE error when trying to login. Does anybody know what else I can try? Thanks in advance for your help! -Dave

dwoolley_ · ‎03-28-2010

Hello, I have Split-Tunneling enabled and working fine. I need to add a public subnet to the split-tunneling configuration so that it's routed through the network connect adapter as we have a backend connection to that subnet on our LAN. When I add the public /24 subnet to the split-tunneling config I am no longer able to connect via network connect... I just get the 23712 error. If I remove the subnet from the split-tunneling config everything works fine again. Additionally, if if add a host address from that particular subnet to the split-tunneling config, I have no problem connecting and everything works fine. This is on an SA2500 running 6.3R6.1 (build 14715). If anybody has an idea as to what might be happening, the help would be much appreciated! Thanks! -Dave

dwoolley_ · ‎11-10-2009

Ruc, Rakeshb, Thanks again for the helpful information! I was able to get the "out of office" link working using Rakeshb's method. I will try enabling "Browser request follow-through" next week to see if that works as well... I'd definitely rather go with that approach as it's much, much simpler. I will post back next week with my final notes. Thanks! -Dave

Re: Passthrough for a Direct Link

Re: Passthrough for a Direct Link

Passthrough for a Direct Link

Re: Can't login to SSL VPN with IE8

Can't login to SSL VPN with IE8

Network Connect error 23712

Re: Passthrough for a Direct Link