Hello Sebastian   Yes your requirement should be possible. Typically, SSID is sent from WLC using radius attribute Called-Station-ID.   You need create radius request attribute policy and match above said attribute for realm selection. Based on ream selection you could assign authentication database. Hope this helps!   Regards, Raveen ... View more

Best practices is to keep default values. Default MTU is 1500 for SA devices. With respect to spped, you could keep it to Auto at switch.   Regards, Raveen ... View more

Hi   Support for Exchange server 2013 is qualified from IVE version 8.X version only. If you are using a legacy hardware which cannot install 8.0 version. Then as you rightly posted, you could consider buying MAG hardware.   Regards, Raveen ... View more

Hello   You can't install Junos Pulse on your Blackberry devices. Junos pulse is supported in IOS or Android platforms only.   Regards, Raveen ... View more

Hello,   Yes I meant IVE version as Secure Access OS version, thanks for the inofrmation. If there is no issues with the connection to backend server, then this should be a potential bug in OS. you need ot open up a case with JTAC for further troubleshooting and solution.   Regards, Raveen ... View more

Hello Jereon   As Kannan explained previously, WAN clustering is not supported irrespective of the ports configured. Yes, bandwidth and latency has to be LAN like performance.   However, to answer your question on MPLS network:   In my experience, I have seen customers successfully establishing clustering over dedicated leased line and also over MPLS network. It might work wihtout issues! But if you encounter any problem, then official statement from Juniper would be it is an unsupported scenario, as this kinda setup is neither tested nor recommended by Juniper.   Hope this clarifies!   Regards, Raveen ... View more

Hello   What is the IVE version that you are running with?   You would see this message when there is a problem in the connection established with backend Radius server. If IVE has got bunch of accoutning messages to be sent out to Radius server in its buffer/queue, and IVE finds problem in connection, then this message would be printed.   Regards, Raveen ... View more

Reference:   CM060: http://www.juniper.net/techpubs/en_US/magnull/information-products/pathway-pages/mag-junos-pulse-gateway-cmc-mag-cm060.html   SM160:   http://www.juniper.net/techpubs/en_US/mag/topics/task/operational/mag-sm160-kit-installing.html http://www.juniper.net/techpubs/en_US/mag/topics/task/configuration/mag-modules-init-configuring.html   Regards, Raveen     ... View more

MAG SM160 module is the one which hosts SSL VPN or UAC software in it. MAG  CM060 card is used for managing Chassis and it is loaded with Junos OS.   Regards, Raveen ... View more

Hi filip   Yes, order should matter and the setting available in first matched role should be used.   Regards, Raveen ... View more

Hi Filip   AFAIK, there is no automatic push of configuration, you have to do it manually. If the concerns is about selecting configuration, then you could select Entire Configuration from What to Push list.   Regards, Raveen ... View more

Hi Filipe   You could use push configuration feature that I highlighted in previous update:   --------------- 3. If DR site is reachable from DC SA, you could use Push Config feature, so configuration will always be in sync.   https://www.juniper.net/techpubs/en_US/uac5.0/topics/topic-map/security-access-config-push-config-us...   http://www.juniper.net/techpubs/en_US/sa8.0/topics/reference/general/secure-access-system-archiving-... ---------------   Regards, Raveen ... View more

1. I reckon, you have connected machine to switch-port ge-3/0/10.0 2. After deactivating dot1x configuration, have you committed the configuration? 3. You could try try deleting the configuration and commit again with 'commit full'   Regards, Raveen ... View more

No Pulse and native dot1x supplicant enabled, no dot1x configuration in switch-port, yet not working strange! Please open up a ticket with JTAC for further investigation.   In the meantime, can you paste switch configuraiton and screen-shot of properties of NIC.   Regards, Raveen ... View more

Hi John   Clustering of UAC nodes that are located geographically different areas is *NOT* supported. Nodes that are present in same datacenter or connected to same switch only supported.   Regards, Raveen ... View more

Hyperlink provided in previous update for XML import/export was incorrect, please ignore. Below is the correct links:   1. Binary export and import of configuraiton file: http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/operational/secure-access-system-archiving-importing-exporting.html 2. XML export and import of configuraiton file: http://www.juniper.net/techpubs/en_US/sa8.0/topics/reference/general/secure-access-system-archiving-xml-import-export.htmlhttp://forums.juniper.net/t5/forums/replypage/board-id/SSL_VPN/message-id/20533   3. If DR site is reachable from DC SA, you could use Push Config feature, so configuration will always be in sync.   https://www.juniper.net/techpubs/en_US/uac5.0/topics/topic-map/security-access-config-push-config-using.html   http://www.juniper.net/techpubs/en_US/sa8.0/topics/reference/general/secure-access-system-archiving-pushing-configurations.html     Regards, Raveen ... View more

Yes, you could just save configuration and save user accounts from DC site. And then use the saved configurationa nd accounts to restore it in DR site.   Reference:   http://www.juniper.net/techpubs/en_US/uac5.0/topics/task/configuration/security-access-configuration-backups-managing.html   (or)   You could do an XML export and import of the configuration:   http://www.juniper.net/techpubs/en_US/sa8.0/topics/task/operational/secure-access-system-archiving-importing-exporting.html   Regards, Raveen ... View more

Yes you could take backup and restore it on DR site's SA device.   Regards, raveen ... View more

Hi Stephen   I understand your concerns and I know upgrading all OAC client machines is a tough job! Yes, there is going to be a fix for vulnerable 4.4Rx release. The fix would be available in 4.4R10 release, which is tentatively scheduled to be released by last week of April. Thank you.   regards, Raveen ... View more

Hi   Could you check if Extensible Authentication Protocol service is running in windows machine? If it running, can you stop the service and then check if you can access network?   How:   Open services.msc --> Find Extensible Authentication Protocol -> Right Click and Stop the service.   Regards, Raveen ... View more

Hi Arslan   The error message is imperative! Host checker is not supported in andriod devices without Junos Pulse clinet. Pulse clinet is mandatory to have support for host checker in android devices. And there is no workaround for it, thank you.   Note: If this answers your question, you could mark this as accepted solution, that way it benefits others as well. Kudos will be cool if I earned it!   Regards, Raveen     ... View more

Hello   You could use MAG as RADIUS server and return VLAN attributes to SRX. There is no need for external authentication source or proxy the incoming request, if user record reside in MAG's internal store.   Regards, Raveen   Note: If I have answered your question correct, you could mark this post as accepted solution, that way it helps others as well. Kudos wil be cool. ... View more

Hi Angel   Are you trying to use EAP-SOH as authentication protocol? What is the NPS version in use? Is server's locale language is English or some other settings configured?   Regards, Raveen ... View more

Hello,   Websense would not log or use original user that would get authenticated. The interaction is between SRX and websense only, and SRX/Juniper would be the reference.   Note: If I have answered your question correct, you could mark this post as accepted solution, that way, it would help others as well. Kudos would be cool!   Regards, Raveen   ... View more

Hello   You need to verify if the switch that you are using supports dynamic VLAN assignment. Not all flavors of DLINK supports dynamic VLAN assignment.   Regards, Raveen   Note: If this answers your question, you could mark this post as accepted solution, that way it helps others as well. Kudos will be bonus if I earned it!     ... View more

Below link is more detailed one and has got example:   http://www.juniper.net/techpubs/en_US/sbr-carrier7.5.0/information-products/topic-collections/sbr-admin-guide-10/index.html?id-75785.html#id-75785   Regards, Raveen   ... View more

Hello   This appears to be gpv license verification problem. You could delete webdeployer directory  and check if that helps!   Workaround: If you are running SBR GEE(enterprise) or SBR carrier, you could connect to SBR via LDAP(LCI feature).   http://www.juniper.net/techpubs/software/aaa_802/sbrc/sbrc70/sw-sbrc-admin/html/LDAPConfig3.html   Regards, Raveen ... View more