- Pulse Secure Community
- :
- About Winston_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Winston_
Occasional Contributor
17
Posts
0
Kudos
3
Solutions
03-21-2012
09:50:PM
hi Ashish, I am not talking about the new session comes up during the failover, . I am talking about the existing user session which will get transfer to the available Node. It is working without a load balancer. The challenge is i dont have control on which node it should transfer all the sessions. regards Winston
... View more
03-21-2012
09:46:PM
hi Raveen, As per juniper documentation user session to move from one Node to another Node during failure does not require a load balancer. It happens seamlessly; My question is that do i have control on which node that user session get transfered ? regards Winston
... View more
03-21-2012
09:03:PM
Thanks for the reply Raveen, What sort of enforcement i can have with UAC version 4.2 apart from compliance check; In SSL VPN i can define which resources these devices can access; Can the same be achieved for mobile devices also through host enforcer. regards Winston
... View more
03-21-2012
08:58:PM
i have three IC-6500 configured in Active/Active cluster; The failover is configured in the switch ; The question is let say 50 user are connected to NodeA, 30 user are connected to Node B, 20 user are connected to Node C. If Node C fails the connected user session seamlessly get transferred to one of the available Node. The Question is do i have control which node this user session should get transferred during failure. Eg if Node C fails i want all the 20 users to get connected to Node A only and not Node C. Is it possible by some configuration like sync rank..etc regards Winston
... View more
03-21-2012
07:07:AM
hi , Currently i understand that smart devices can be managed by junos pulse through sslvpn; But would like to know when UAC will support for smart devices; regards Winston
... View more
03-08-2012
08:29:AM
If you want to have enforcement at Layer-2 then adding two infranet controller does not add any value to the configuraiton. You have to enable two radius server in the switch. Adding two radius server as a infranet controller enforce at Layer3 not at Layer2 becuase it requires an IP Address to have access to the Infranet Controller; Hope this clarifies your question; Let me know for any clarifications. regards Winston
... View more
03-07-2012
04:12:AM
hi, With regard to clustering, it is recommended to deploy both the devices in the same locaiton (LAN) and not over WAN. In this case you can configure as Active/ Passive in the same subnet and use the VIP for failover. If you are deploying the devices across the WAN with different subnet, then the easy option available for failover is asl follows; Configure all the switches in the respective locaiton with two radius server; The first radius server should be the one closest to the switch. Note: Recommended to deploy in the same location if possible... regards Winston
... View more
03-07-2012
04:06:AM
If you tried all the above steps and still it is not working; Just try sync the time again and restart the IC-6500. It has worked for me most of the time. regards Winston
... View more
08-09-2010
11:44:PM
Hi , How you are using hte Hob Client; through WSAM or JSAM or NC Did you tried with IE ? regards Winston
... View more
07-20-2010
09:49:PM
Hi, To access the resources 10.2.1.0/24 for all kinds of traffic like tcp,udp, and icmp. Just mention the complete subnet as below 10.2.1.0/24 For internet access you can mention as below tcp://*:80,443,53 udp://*:* icmp://*:* Hope it clarifies regards LPW
... View more
07-20-2010
08:18:AM
Hi, There is no specefic document i have seen for H3C. Please find the following link h3c.com-dot1x which details the dot1x configuration for dot1x in the switch. Juniper NAC is based on dot1x and most of the vendor support majority of the dot1x commands. THe most important is the guest-vlan command and auth-fail vlan command. Some time you will have challenges to find timers command; Hope it clarifies; Let us know if you want any other details. All the best; regards LPW
... View more
07-12-2010
06:53:AM
Dear the IC wil know the IP Address because OAC is running which will infrom the IP Address to the IC. You can see the ip address in the logs of IC. I hope it clarifies; regards LPW
... View more
07-12-2010
06:46:AM
Hi, As of UAC 4.0 there is no option to check for standard list of software. and you know that the standard list of software varies for different organization. I dont see any road map or requirement for the same. As of now you can check only through process with regard to USB we can do check whether it is enabled or disabled. Check the following registry settings "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor\Start" The value for start = 4 , then usb is disabled and any other value indiacates usb is enabled. regards LPW
... View more
07-10-2010
11:55:PM
Hi, I am not sure if you are talking about Layer-3 or Layer-2. I assume you are taking about both Layer-2 and Layer-3 combined. I also assuem the end user has an agent installed in the machine. When the agent is installed, it will first authenticate itself against the IC. So IC will be Server who will be aware of the end users Machine IP Address. NAC is implemented at this point itself. Additional If I want to protect my servers then i should place the server behind the Juniper Firewall. In such scenario the IC which is already aware of the authenticated user machine ip address pushes the respective policy to the firewall; The user need not get authenticated again. Advantages: If the user logs off the policy is dynamically removed from the firewall, which means any other user cannot spoof the ip address and get access to the resources; which will be possible if it was a static rule based policy in the firewall. regards LPW
... View more
07-10-2010
11:42:PM
Hi, All the above host checker is very straight forward except the USB check 1- USB is disabled or not - Doing testing for USB once it is done will post Create a New Hostchecker Policy 2- Users should be on domain like abc.com Add Custom: registry Setting Rule Name: domain_name_check Registry Subkey:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters Name: Domain Type:String Value:abc.com ( type in the domain name you want to check) 3- The netbios name for domain should be ABC Add Custom: Netbios Rule Name:Netbios_check NetBIOS Names:ABC Select the <<required>> radio button 4- Skype/Bit torrent software should not be installed Add Custom: Process Rule Name:Skype_Deny_Check Proess Name:Skype.exe /*The actuall exe file name*/ Select the <<Deny>> radio button Md5 Checksum (optional): You can use md5 calculator and generate the checksum /* the checksum will vary for different skype version so better not to use in this case */ regards LPW
... View more
07-08-2010
04:25:AM
When the User connects the machine to the Switch; EAP negotiations starts - authenticating against a Realm which will maps to a Role finally - When a Role is assigned. Paralley Based on the Role Radius Return Attribute Policy will assign the VLAN. Similarly basedo n the Role Layer-3 Enforcement policy will be triggered and pushed to the Firewall. You have to configure the policy with the following details protocol: tcp or udp destination ip address desintation port nos; Note: The source-ip address it will know when the machine gets the ip address. So it creates a specefic policy for that user with that source-ip address and destination ip /port details . Regards LPW
... View more
02-21-2010
11:05:AM
Hi, We have requirement from customer to secure their IPhone 4.0. What i understand from Junos pulse mobile security datasheet is that lot of basic features not supported in IPhone. Is this true, Junos pulse mobile security solution is not for supported for Iphone 4.0. if it support will the demo link will work out for Iphone. Is the solution is based SAAS Any suggestions for the customer requirement. regards Winston
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
