Hi Heather,   Did you ever get anywhere with this as I look to be hitting the same issue.   00164,09 2013/11/04 11:35:53.288 1 SYSTEM dsAccessService.exe dsAccessService p7756 t1140 service.cpp:815 - 'AccessService' unable to open JuniperAccessService, error 1060 00141,09 2013/11/04 11:36:06.330 2 SYSTEM MsiExec.exe jnprTdi p7784 t2F8 jnprTdiInstDLL.cpp:200 - 'jnprTdi' disableFsRedirection failed with error 1 00158,09 2013/11/04 11:36:06.330 1 SYSTEM MsiExec.exe jnprTdi p7784 t2F8 jnprTdiInstDLL.cpp:204 - 'jnprTdi' deletion of driver file jnprTdi_744_38461 failed, error 2 00140,09 2013/11/04 11:36:06.330 2 SYSTEM MsiExec.exe jnprTdi p7784 t2F8 jnprTdiInstDLL.cpp:209 - 'jnprTdi' enableFsRedirection failed with error 1 00148,09 2013/11/04 11:36:06.330 1 SYSTEM MsiExec.exe jnprTdi p7784 t2F8 jnprTdiInstDLL.cpp:223 - 'jnprTdi' deletion of driver key jnprTdi_744_38461 failed  Thanks   Will ... View more

I believe the issue was fixed in release 7.4R3 and equivalent updates in the different release versions. Although I can't see it listed as an issue or fix in the release notes. ... View more

HI,   The proxy uses no authentication it is simply for filtering inappropriate content. On the IVE for testing I'm using local username and password.   I've finally had a chance to look at the client debug logs and can see it detects that it should use the correct proxy but then get the following error before it tries to connect to the gateway directly.   00168,09 2013/02/28 14:33:11.420 1 <USERNAME> dsTermServ.exe dsTermServProxy p9436 t958 ncp.cpp:488 - 'ncp' getaddrinfo failed to resolve proxyHost proxy.intra.domain.com, err 10109   Which is strange as the machine can resolve and use the proxy server fine.   Cheers ... View more

  Not sure what you mean by type of proxy.   The users browsers can't access the internet directly from the corporate network and have to use the proxy that is specified within the pac file. The pac file is configured in the browser via the proxy auto-configuration file settings to point to an internal server http://server.domain.com/proxy.pac, this then specifies the various exceptions and specific proxies for certain resources and should nothing match provides the proxy.company.com:8080 for clients to access the internet. The actual proxy is a BlueCoat.   If while the RDP profile is trying to connect I can see from a packet capture and netstat that the connection is attempted directly and not going via the proxy, hence is fails.   I was testing this on the DTE release before considering an upgrade to a production system as also looking at the IPv6 capabilities. ... View more

Hi MrSprinkles, Did you manage to resolve your issue with machine auth using machine username / password. I appear to be having the exact same issue, with the IVE reporting Samba failed. Out of interest is your domain Server 2003, Server 2008, or Server 2008R2? The reason I ask is because I remember the SA having some issues with 2008R2 and I'm wondering if this could be related especially as the message relates to Samba. Cheers ... View more

Hi, thanks for the update. It is now working but seems to be extermely slow at re-writing even basic websites. I've also been testing certificate based auth which works ok on Androids (after getting the certificates installed) but wondered if it is possible to do Certificate and AD auth chained? May post this question to a new thread. Cheers ... View more

Hi I had exactly the same issue with onDemand connections from the Pulse client. This is now fixed in 7.1R4.0 as can be seen in the release notes. If your role didn't have WSAM or JSAM enabled then onDemand VPN failed, who knows why? Hope this helps others resolve their onDemand issues. Cheers Will ... View more

Hi, Did you ever manage to resolve this issue with the intranet icon not apearing in the Pulse client? I have the same issue on both Andorid and iPad clients. It works when I connect to my live gateway but not the test gateway and they are both configured the same. Thanks Will ... View more

Hi, Yes it can be and we have it running, you have to have a passthrough proxy to publish the GridSure web service and customise the pages but that is about it. Do you need any more information? ... View more

Hi, I've got exactly the same issue, did anyone manage to resolve what caused it? Thanks ... View more

Hi, Did anyone manage to get this working through the re-writer and if so do they have any guidelines for it. I'm currently looking to try and get HP Quality Centre 10 working but after selecting the bookmark and allowing the ActiveX download/install I just get a pop-up window error saying "Failed", they only way to stop it is to exit IE. Currently running IVE 6.5R6 Thanks Will ... View more

I've just tried this with the WIndows 7 Agile VPN and get the same error as mentioned previously: "error 13843:invalid payload received". Have you seen this and do you know the reason for it? I have so many questions about how this feature works and what with, but no clue from the admin guide. If I have multiple realms / sign-in policies configured, how does the IKEv2 feature know which realm to go against or this there some unwritten feature that it has to be the "Users" realm? ... View more

I'm also looking at this new feature but can't get the gateway to log any messages or send any reply packets to the client. Anybpody had any luck getting this working yet? Thanks ... View more

I'm reviewing this requirement again for a specific customer and it looks like the only option without creating domain policies to allow NT4 cryptographic algorithms is to use certificates? As the domain servers are all Windows 2008 R2, has there been nothing done to enable this? If not it starts to question the use of machine username and password on the SA/MAGs, if it doesn't work, perhaps the admin guides should be updated to include a note on this limitation / caveat? ... View more

We do generally define our AD servers on the SA as LDAP instances, but from the admin guide to use the automatic connections the server must be defined as a AD instance. I've also tested this today, changing the server type in the realm used for machine authentication to LDAP causes a new error to appear in the logs: 2013-10-22 09:52:57 - ive - [xx.xx.xx.xx] Root::host/<hostname>.<domain>.com(PLAP)[] - Could not authenticate user host/<hostname>.<domain>.com in LDAP server LDAP-AD using protocol MSCHAPV2: challenge-response open protocols are disabled. Also if using either of the options to auto establish with machine credentails and then switch to user credentials at login using an LDAP server fails, switch this to an AD instance and the user authentication works. Testing the LDAP server outside of the PLAP configuration works fine. So it seems to me the only true way without changing GPOs and cryptographic settings of the AD is to use machine certificates for the machine authentication and then either user certs or an AD instance for the user connection. ... View more