This has been a very helpful thread as I'm butting heads with this issue. I added v6 addressing to my SA4500 cluster running 8.or7.1 .recently. I assign clients a vlan via role. The vlan only allows ipv4 addresses. I am assigning the clients a ipv6 subnet in the vlan in the connection profile. The clients get a ipv6 address from the assigned role. They cannot ping each other while connected. They can ping each other via the ipv4 addresses. The connected clients cannot ping the ipv4 address of the internal interface of the SA, nor ping through to any ipv6 address beyond. The ND cache shows a ff02::1. The vlan ipv6 route table shows: default fe80:: 64 :: VLAN 100 0 default :: 0 VLAN 100 2 The route status is flagged as unkown. My guess is I would need to define a route from the ipv6 address subnet range I assign to clietnt to the vlan ipv6 gateway. I I wasn't able to find good information to that effect in the documentation. ... View more

We do something similar to this using RSA tokens.  Basically, you define both the Token auth server and the AD auth server.  In the Sign In Page interface you specifcy a primary and secondary authentication server.  It is helpfull if both server's have a common username. ... View more

I can confirm on my test unit that the new client works on a Surface 1. ... View more

I've had about a dozen uses out of 300 who have had to uninstall the client and then reinstall after a reboot.  Most were clients moving from 5.01 or 4.07.   ... View more

Pulse is the only option for OSX With Mavericks.   http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB28278&smlogin=true     ... View more

I think I have found another issue with r8.0.  We have a split tunneling rule with a detailed rule set.  10.10.10.0 and 10.10.20.0 are both denied.  10.0.0.0/8 is then allowed in the detailed rule.  Since 8.0r1 the detailed rule set doesn't seem to be evaluating.  I broke to rule into a Deny rule followed by a seperate Allow rule and that fixed my issue.  ... View more

I'm on 8.0r1 and I'm getting intermittent reports that Pulse Collaboration is failing just after meeting creation.  The users get the error message below.  "You cannot access the meeting because your session has expired.  Please rejoin the meeting."   ... View more

Yes. Pulse client 4r6 was installed on Windows v8.  Upgrading Windows 8 to 8.1 caused a networks stack failure.  Installing Pulse 5.0r1 on Windows 8.1 woudl cause a bluescreen and reboot.  I had to re install Windows 8.1 before Pulse client 5.0r1 would install and function. ... View more

Two seperate client issues.  Both showed dcom permission errors in event mgr ... View more

is there a KB on thisissue?  I researched this issue a few days back when it was first reported and didnt find references.  These type of client disabling bugs need to be highlighted so support personel sont burn incident response time. ... View more

I cribed much of my user statement from that doc, with attributation of course.  The only oddity we have had cropped up in our test so far as been my windwos 8.1 laptop.  It started as Win8 Enterprise.  I loaded Pulse client ver 4r5 and that resulted in the network stack failing.  No IP connectivity.  I then removed pulse client and installed Network Connect and all worked.  Later I installed Pulse 4r6 and it was funcitonal.  I then upgraded to 8.1.  From there my system developed severe networking issues.  I removed all Juniper clients and used netsh to reset the IP and Winsock.  That got me back functional.  I then loaded version 5 pulse client from r8.0r1 and it caused a Bluescreen and reboot.  I worked through the registry and found many of hte Juniper keys had an unkonwn SID with permission but not System or Trusted Installer.  I tried taking ownership and deleting these keys.  On reinstall of Pulse 5 I no longer got a bluescreen but the network stack would no longer work.  Also I couldn't remove the Junos client as it hadn't registered in Programs and Features.  I pulled out the miniport drivers via device manager and was able to get the network back.  I then reinstalled win 8.1 fresh and have not had problems since. ... View more

I'm in final testing before pushing to productiion.  The Junos 5.0 client client was not included in the IVE download.  I have to pull down the install files and then upload them to the DTE.  That is a first.  Java is increasingly an issue on all platforms. I'm really hoping that they move core funtionality to html5/javascript as soon as they can.   Here is my users expeirence issue lists.   IE11 on Windows 8 system showed graphical issues when using Webconnect.                 Solution:  Under Internet Options/Advanced check the box for Use software rendering..                 Alternatively upgrade the video driver on the client workstation.   IE11 on all Windows Platforms will not load the ActiveX control.  The system will fall back to the Java client.                 Solution:  Ensure that Java is installed on workstations that have IE11.   OSX 10.7 and greater default to only allowing the installation of applications signed by the Apple store.  This prevents the Juniper client from installing by default.  To install the VPN client you will need to make the following client changes.   Solution: Security and Privacy Settings, "Allow applications downloaded from" should be set to "Anywhere   Safari 7.0 implements tightened browser plugin security.  These changes interfere with the use of VPN.  Please make the following changes to fix the issues.   Solution: Use Safari to browse to the vpn.adtran.com.  Log in and attempt to deploy Pulse.  This will not work but will create an entry we will modify later. Open Safari Preferences, click the Security tab and choose "Manage Website Settings..." next to the Internet Plug-ins checkbox. Click on Java and find the SA/IC URL listed on the right column.  Change the pulldown for that listing to "Run in unsafe mode" ... View more

I dealt with this by assiging both roles to the realm.  Then I used role restirictions to decide what role a type of client gets.  In my case I based on browser string with a *Win* and *Mac* for Junos Pulse and then let everyone else get NetworkConnect. ... View more

So I found out a bit more as the day has progressed.  Clients that update form 8.0 to 8.1 running Pulse 4.0.4 give the log messages from my previous post.  These users can connect without error but will not pass traffic.     Clients that are installed onto a clean windows 8.1 system loose all network access.  The Juniper network driver is installed but none of the interfaces can DHCP.     I've got a case open with Juniper support and the early word is that 7.4r7 is scheduled to to have the fixed client version.  That is not expected until Early December.     Network Connect does not seem to have these issues.  I'm migrating the few affected users to NC and I'll see how that goes.   ... View more

I'm finding the windows 8.1 is not allowing install of the Juniper jnprTDI component.   00132,09 2013/05/23 13:27:18.657 1 SYSTEM MsiExec.exe jnprTdi p1436 t1058 TdiInstall.cpp:160 - 'jnprTdi' ControlService failed! Error: 1062 00144,09 2013/05/23 13:27:18.673 3 SYSTEM MsiExec.exe jnprTdi p1436 t1058 TdiInstall.cpp:112 - 'jnprTdi' service: jnprTdi_740_32235 marked for deletion   Clients connect but no network session is available.  There is not obvious error to the client that there is an issue, other than no communication.     ... View more

I am considering my options on upgrading to 7.4r3.  Has anyone succesffuly upgraded from 7.4r1 to any later code?  Did you run into the issues that the IVE experience? ... View more

What version of code is your SA700 on?  The document's reference 7.1 or greater.  It looks like VLAN's were introduced in IVE 5.x and improved in IVE 6.x.   ... View more

As a follow on.  I applied 7.4R3 to my DTE running 7.4R1.  This cause the same error as before.  Rolling back to 7.3r3 allowed me to install 7.4r3.  I"m working on a plan to upgrade my production 7.4r1 Active/Passive Cluster.  How do I roll back the cluster or is this a juke in the DTE enviroenment?  Has anyone move an SA4500 from 7.4r1 to 7.4r2 or 7.4r3?  ... View more

Has anyone managed to come up with a host checker method for this?   Registry keys are not helpful as far as I can tell the bdesvc reg settings are the same for an encrypted and unencrypted system.   The process is svchost for the netsvc group that include BDESVC   The Service Status woudl work but I can't work out how to check a service status.   Command line tool to check status manage-bde -status   wmi http://www.windows-noob.com/forums/index.php?/topic/4095-how-can-i-determine-if-the-drive-is-encrypted-protected-or-not-during-a-bitlocker-task-sequence-in-winpe/     This looks helpful but I dont' see how to run a wmi check. ... View more

I restored my dte vm from backup.  After verifying it was funtional running 7.4r1 I then applied the 7.4r2 patch again.  I've verified the download's md5 previously.  Here are the console messages I get.   Doing post-installation setup Recreating data partition Extracting runtime contents of package /pkg/packdecrypt: decryption failed /bin/mv: cannont stat '/data/runtime/root/home/runtime/*': No such file or directory Starting system software version 7.4R2 (build 24401)   Using driver: vmxnet .Loading vmmemctl .......   Licensing Harware ID: blahblahblah   Importing log files Importing cockpit files Importing snapshot file unable to import user data Import failure is fatal at /home/bin/dsimportall line 211. Unable to import data!  Sorry.   Shutting down network.... Unable to run boot scripts, you will need to do a rollback(10)   Do you wish to reboot now?   Rebooting I get this message Licensing Hardware ID: BLAHBLAHBLAH   About to boot as a stand-alone Junos Pulse Secure Access Service Hit TAB for clustering options, wait or hit Enter to continue... Starting Core Services   Welcome to the initial configuration of your server! Not: Press 'y' if this is a stand-alone server or the first machine in a clustered configuration. If this is going to be aq member of an already running cluster press n to reboot.,  When yopu see the 'Hit TAB for clustering options' message press TAB and follow the directions Would you like to proceed (y/n)?:   Hiting yes and agreeing to the license results in   Can't call method "getEntry" on an undefined value at /home/boot.pl line 522. Shutting down network... Unable to run boot scirpts, you will need to do a rollback(10)   Performing a roll back results in    You are abolut to do a rollback ...   rollback performs and reboots system.   Licensing Hardware ID: BLAHBLAHBLAH   About to boot as a stand-alone Junos Pulse Secure Access Service Hit TAB for clustering options, wait or hit Enter to continue... Starting Core Services   Welcome to the initial configuration of your server! Not: Press 'y' if this is a stand-alone server or the first machine in a clustered configuration. If this is going to be aq member of an already running cluster press n to reboot.,  When yopu see the 'Hit TAB for clustering options' message press TAB and follow the directions Would you like to proceed (y/n)?:   Hiting yes and agreeing to the license results in   Can't call method "getEntry" on an undefined value at /home/boot.pl line 522. Shutting down network... Unable to run boot scirpts, you will need to do a rollback(10)   I've attached the dump diagnostics messages I got from the console.   ... View more

The error is can't call method "getEntry" on an undefined value at /home/boot.p line 522.   ... View more

Ouch.  I upgraded my dte from 7.4r1 and it never came back after the reboot.  System is hosted by a vsphere 5.0.  The upgrade failed the first time I tried to apply it so I redownloaded and verified the md5.  I rebooted the dte then applied the upgrade.  The system never returned from boot.  The console gave an error that it was unable to run the boot time scripts. I tried the rollback and got the same issue.  I then fatctory defaulted and was able to boot.  I was then able to load the 7.4r2 patch on the blank system.  I"m restoring my DTE from backup and I will try again after snapshoting. ... View more

Here are a few hopefull hints.  Verify the defined vlan is on every trunk in your switch stack.  Verify that your router has an interface on the client vlan you plan to use.  Check that there are routes defined to let the traffic go both ways. Depending on your network equipment you may have to have a defined native vlan on the trunk port.  ... View more

It can be done.  On your swtich you have to set the interface that you connect your MAG/SA to as a trunk with the native vlan as the network you have assigned the applicances managment interfaces to and provide a tagged vlan that host the network you want to assign to the clients.   Under Network/VLANs you define the tagged vlan and assign an IP for the appliance in the IP range of the tagged vlan.   Under User Roles, you then edit the role you use to assign the NC/Pulse settings and check the box for VLAN Source IP.  from there you select the vlan you defined under network and you should be in good shape.    ... View more

I"m very currious about this.  We have a cluster of SA4500's with 300 user licenses between them.  We were investigating adding a WAN site with a Mag 4610.  Our plan was to buy a Mag2600 and a Mag4610.  Member licenses for the clusted SA4500's and the Mag4610, and a server license for the Mag2600.  Then we could redistriute the licenses we had on the cluster across the platform as needed.  We were informed by Juniper sales organization that we would have to rebuy all of our client access licenses and there would be no transfer.  Esentially we would have to walk from 3 years of investment to use the enterprise licensing.   Did I misread the response here that the user access licenses should be able to transfer with the purchase of the proper enterprise licenses? ... View more

I have a 10.8 user who had pulse previous to the upgrade.  Now the client uninstalls each time he reboots.  I'm Deleting the /Library/Application\ Support/Juniper\ Networks folder doesn't fix the issue.  I'm trying to put together a manual removal method that will pull all Juniper client components off the system.  Can you provide me with the client component locations? ... View more