- Pulse Secure Community
- :
- About henke_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
henke_
Occasional Contributor
14
Posts
0
Kudos
1
Solution
11-29-2011
12:42:AM
Thanks ruc, Have actually already tried <password2> <password#2> <[email protected] auth server> (note, secondary auth server name contain spaces. not sure if that would affect things) None of those work unfortunately. -EDIT- Removing Spaces in the secondary auth server name using the [email protected] syntax, makes it work ! So, I slap my own hands for having used Space in that object name! Henrik
... View more
11-28-2011
12:25:PM
Hello, Has anyone been able to use the Secondary Password from the Signin Page for NTLMSSO ? I have a case where we need to take the [primary] Username and the password for the Secondary authentication server and use it for NTLMSSO. I haven't been able to identify a variable that contain the secondary password. (like the Primary Password which is available in <password> (<password>)). Juniper SA6500 6.5R5 tks, Henrik
... View more
02-13-2011
07:28:AM
According to JTAC, only certDn.* and certAttr.* fields can be checked under Realm or Role Restrictions > Certificate . Other certificate fields, in my case certIssuerDn.*, can only be used in Custom Expressions in Role Mappings. What a shame. " Realm Cert restrictions would only be able to pull up details mentioned in the Subject and Alternate Subject fields of the user certificate. Also, within these fields, only the CN. OU, O, C and DC fields are supported for the Realm level cert restriction checks. For all other fields, we would suggest that you use the custom expressions at the role mapping level to allow/deny users based on other cert attributes
... View more
02-09-2011
05:47:AM
JTAC case opened for this.
... View more
02-09-2011
04:10:AM
After some further testing on our production SA6500 6.5R5 (naughty..), I need to correct one thing. If the one Host Checker passes for the Role mapped to the user, the result of the other Host Checkers used by other roles, are not displayed. Fine. There still the awkward situation though that if the Host Checker fails for the Role, all the results of all the other Host Checkers for the other Roles are displayed, along with the User's Role's checker. Making it difficult for the user (and helpdesk...) to know which one actually applies to him/her. Still researching...
... View more
02-08-2011
02:34:AM
By using the logical statements in the custom require, you should be able to 'link' the OS check to the specific patch check you're interrested in for that OS. (OS_Check_XP AND Patch_Check_XP) OR (OS_Check_Vista AND Patch_Check_Vista) The 'Patch_Check_XP' (or Vista) could then check for a set of specific patches. I added a little screen that might show what I mean. Again, I have not tried this but in theory it should work... Henrik.
... View more
02-04-2011
08:11:AM
Hello, Perhaps you could use a Custom 'Require' for the rules within the Host Checker policy instaed of 'All of the above rules' or 'Any of the above rules'. Say you have your Host Checker policy containing 4 rules: OSCheck-XP PatchCheck-XP OSCheck-Vista PatchCheck-Vista You could, in theory, have a custom rule requirement as (OSCheck-XP AND PatchCheck-XP) OR (OSCheck-Vista AND PatchCheck-Vista) I have never tried it so in theory... Henrik.
... View more
02-04-2011
01:31:AM
Hi, Unfortunately there is no difference in behaviour if using Custom Instructions or Reason Strings. The user is still notified about the result of other Host Checkers. Henrik.
... View more
02-03-2011
08:27:AM
Hi, Thanks for your reply. You're right. The Host Checkers are in this scenario applied to User Roles, and not the Realm. The issue is not that the Host Checker fails to correctly do it's job for this spepcific User and User Role. In the case I presented the Host Checker passes for the user, no problem, and the user have the resources provided by the User Role (once the User has clicked the "Continue" button on the "You computer's security is unsatisfactory" page). My issue is that the result of other Host Checkers, not applicable to the Users' User Role, is displayed to the user. Each time. Those come from other User Roles used in the Realm's Role Mapping for other users. (and since those other Host Checkers are designed for other users they will always fail in this User's PC) It would be annoying and confusing for the user to see results from other Host Checkers and would also be untrue to tell the user that his/hers computer does not meet security requirements when those Host Checkers do not apply to the user. So, I am looking for a way to make the Host Checker display the result(s) related Only to this User's User Role. Henrik.
... View more
02-03-2011
05:29:AM
I have an annoying result relating to Host Checkers and the "Your computer's security is unsatisfactory". I am hoping I can make any sense here.. A case: A User Realm associated with a URL a User is accessing has multiple Role Mapping rules, mapping various users and user groups to different Roles. Each User Role can have it's own Restrictions such as Certificate options or different Host Checkers required. So, among the different User Roles that may or may not be mapped to a specific user, there may be a whole bunch of different Host Checkers defined. Image a case where one User maps to one single User Role (out of the many possible in the Realm). The Host Checker that is specified in that User Role has passed. The User has no other roles assigned in the Role Mapping so no other Host Checkers is valid for this user. Still, there is a page displayed after login informing the user that other Host Checkers has failed. Since the user has already passed "his" Host Checker, the user have the option to "Try Again" or "Continue". Obviously the user is profoundly confused why he is told that "Your computer's security is unsatisfactory" and is shown a (potentially long) list of hos tCheckers that has failed, simply because they don't apply to him. How to avoid this behaviour and have the host Checker only display any failure condition(s) related to the Host Checker policy applied on the User Role(s) the User is mapped to? tks, Henrik.
... View more
02-02-2011
01:01:AM
Hello, I am having trouble checking some specific client certificate fields under the User Role > General > Restrictions > Certificate. I have NO problem checking certDn fields such as CN, OU, e.t.c. Given certDn field certDn.CN = "DOE, John" In this case using Certificate Field Expected Value CN DOE, John works fine. I am, however, Not able to check certAttr.* or certIssuerDn.* fields. For example certIssuerDn.CN = "Issuing CA XX" or certAttr.altName.UPN = "[email protected]" Those, I have not been able to check. I should probably add that I am trying this on 6.5R5 on a SA6500 and 7.0R1 (DTE VA) Anyone have an idea? Thanks, Henrik.
... View more
07-29-2010
02:23:AM
Thank you pkc, Even though I am not running ESX, you did point me in the right direction. By downloading the VmWare vCenter Converter I was able to convert the VA to WorkStation format. And the converted VM runs fine in both WorkStation and Player. Thanks, Henrik
... View more
07-29-2010
12:40:AM
Hi, I'm getting an error "The OVF descriptor file could not be parsed" when trying to import the "VA-DTE-16007-VT.ovf" file into VmWare WorkStation 7.1.0. With VmWare Player 3.1.0 the error message is: "Failed to open virtual machine: Failed to query source for information" Anybody encountered the same or have an idea? Henrik.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
