Hi, Running an SA4500 and using the Hostchecker to check that users have sufficient AV protection before getting onto the SSL VPN and accessing network resources... I am CONSTANTLY getting calls from users when a new ESAP Release comes out that a vendor's AV Product does not work when on a previous release it did work...this happens almost ALL the time for one product or another. I either call support and we find out that it is a known issue with the version of ESAP release and we put in a "workaround process check" until the next ESAP release (which could be a month away) or it is documented as a "new" bug with the ESAP release. I have also run into situations where ESAP does not keep up with new AV releases by some major vendor's...McAfee, Norton, AVG Free... Also, people have a LOT of issues with IE settings and Hostchecker not passing, but no error message comes up, just the Realm dropdown box does not display for the user...I know from troubleshooting this issue many, many, many times that this is a Hostchecker/browser issue. The latest ESAP Release (2.2.3) seems to have issues with AVG Free... Am I missing something here? Have I misconfigured the Hostchecker? Are other Admins having similar issues with Hostchecker? Is it worth the aggrevation? Comment/Suggestions appreciated. Thanks Ok, so I had to help 2 more customers since this posting...one I had to have them uninstall AVG Free and install Microsoft Security Essentials, the other one I had to put a bypass Policy with a Process Rule for McAfee. In both cases I walked them through uninstalling all Juniper components from their Programs and cleared their temp internet files, cache, and history...and I actually rolled back to the previous ESAP Release to see if that would solve the problem. Very, very, very frustrating for both myself as an Admin and for the users who are trying to get work done over the VPN from home. Did I mention this is getting to be more of an Administrative nightmare than it is worth? So much so that Senior Execs are looking for a more seamless product that connects as an extension of the network...
... View more
