Can the Host Checker determine if the iOS client is a MacBook vs and iPhone/iPad??? Pulse does not work on MacBooks to my knowledge. MH ... View more

Ihave come across this as well. If one uses the default "Users" url, as I suspect most do, defining multiple realms under that particular url, the Junos Pulse fails. If you create another URL, and add multiple realms to the url definition, then the Pulse client prompts the user for the Realm to log into. Even if you define the Realm, as you can with Windows mobile devices, pointing it at the default URL for USERS, causes the same issue, the client fails to connect. Synopsis: the default url "*/" is not recognized by the Pulse Client whereas "*/Mobile/" will be recognized. I have posted this before, as it was fairly early in the release code, I have not followed up with Juniper. MH ... View more

The difficulty is the same for a mobile device as for a client machine, in that, multi-realms cause the application to produce an error message that does not truly reflect the problem. The error message points to a certificate problem with a corresponding "authentication could not be completed" in the application tray. this message would lead one to believe that A). their certificate for the appliance was a problem( eg. expired, corrupt etc.) which in fact, the certificate is OK. B). that , in our case we do not use personal certificates, that the site was now using personal certificates and the user or machine had an incorrect or no valid certificate. I have not reported this to JTAC at this time, as I believe that the application and documentation is still relatively new and needs to mature. Other users of this forum have posted similar findings/questions, and may have already posed the question to JTAC. Although the documentation infers a relatively quick setup process, the application may be doing exactly as the developers had intended it to do, therefore, it is simply a documentation adjustment. I am not currently planning a campus wide roll out at this time, so my intent is to wait and see what comes down the pipe in the next little while. One last thought...is that the Junos Pulse was created for mobile devices (as I understand it), to provide VPN remote-like access and the connection methods appear to be fragmented. Eg... ::>For mobile apple devices (i-touch, i-phone i-pad), the connection method is Net Connect. ::>For mobile windows devices (htc, windows mobile etc) the connection method is WSAM. ::>For Windows machines (XP, Vista, W7) the connection method is Net Connect . ::>For other OS's (MAC, Linux etc), not currently supported ( hopefully a maturity statement). My point is that, when looking at Windows devices for example, whether mobile or not, there are two different connection mechanisms which is (in my view) an administrative nightmare to setup, configure and manage. A single unified client connection mechanism (NetConnect preferrably, others may argue) is the best option for all who have to manage the users and their expectations. Thanks for listening MH ... View more