Hi, Not using MAGs but pretty much the same issue as you on SA 6500s. I upgraded from 8.0R6 to 8.0R11 and now my RSA auth doesn't work anymore. Waiting on my RSA admin to clear the node secrets on his side in order to fix the issue. Pretty sure it happened to us in the past a couple of years but where we had to do the same thing to fix the issue after an IVE OS upgrade. ... View more

You can also research MaxNumFilters on google. Sometimes if you have a workstation with multiple network filter drivers it hits the default limit of 7 or 8 on windows 7 and you will get that issue where you can't add more bindings which is what you seem to be having. Also depending on what version you're using as someone suggested you should be using 5.0.3 and up on windows 7 and 8 since it's using NDIS 6 instead of NDIS 5 and NDIS 5 has limitations and we've seen on some machine that it was exhausted by our firewall product so no new bindings could be added. Give that a try and let us know. ... View more

@kita wrote: NC and Pulse should support TLS.  We are doing further testing to ensure there is no compatibilty issues with any Juniper components.  In regards to the message, NC and Pulse should connect via SSL as this is used as the control channel.  However, the control channel should using TLS protocol only after the change has been made. Hi Kita,   Any update on those compatibility tests results? ... View more

@Antioch wrote: I have been running this way for at least 3 months with no issue. We have folks accessing our portal with everything from IE9-IE11 as well as Google chrome for windows and mac, Firefox for windows and mac, and Safari on mac and no one has encountered any issues. Thanks for the info.   Couple of follow-up questions for you Antioch. when switching to TLS only, did you also uncheck the SSL Legacy Renegotiation Support option -  Enable support for SSL legacy renegotiation   Also do you have Network Connect or Junos Pulse users connecting to your box? Anything on that side since you've switched?   I've done the tests on my side and it seems to be working fine like you said on the major browsers as far as I can see. The only concern I got are people still using older browsers like IE6 that might not be working... ... View more

Any update on this one? Has anyone done the change on their end? Any issues experienced? ... View more

I'd be curious to know this as well.   So far the only thing I can see is using the User Summary Report and exporting to CSV and then manipulating the data to find out what I want. But that's limited. ... View more

@MichAda wrote: JTAC just informed me they have a KB out for this problem....   Juniper KB on the subject: http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB26656   Link to TechNet from Juniper KB: http://blogs.technet.com/b/joscon/archive/2011/02/21/windows-7-service-pack-1-fails-with-error-code-0x8004a029.aspx I like that they say it's not possible to query the key and find out if there's enough space in their KB. When on my side I believe I could build a script that would be able to do it.   Not impressed by Juniper on their support for Junos Pulse lately. ... View more

Hi Kannan,   Thanks for your answer, but I'm using an LDAP auth server setup...   I can see the user attributes when setting up a Radius auth server, but right now I'm not using this...   Do you know if there's a way to do this using an LDAP auth server?   Thanks. Luc ... View more

Weird because since 5.0 R3 came out in order mainly to fix that Surface incompatibility issues.   I've used the method identified above with 5.0 R1 successfully unbinding all network adapters and just binding it to the wifi adapter of the surface but now that 5.0 R3 is out, I don't have to do anything special after the install and it works fine.   I do use a Surface Pro 2, if that makes a difference and I've reinstalled windows from scratch on two difference surface and it works fine for me.   The nvpsbind thing shouldn't be required anymore since Juniper switched from NDIS5 to NDIS6 and it's not required to do this anymore since it should work out of the box.   That being said, I'm using the standalone installer(MSI) and haven't tried installing directly from the IVE.   I'm also using IVE 7.3R1 right now on SA6500 boxes. ... View more

Hi, I may be far in time, but the solution is the checkmark located in the JSAM policy to allow a new port to be added to the client if the client port (ie. 80) is being used. Thanks ... View more