It's recommended to upgrade first to 7.1R16, then upgrade to 8.0.  Recommended upgrade paths are given on the R1 release notes.   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/Junos-Pulse-Secure-Access-Service-Release-Notes.pdf ... View more

We also use UltraDNS and have it balance between our two SA4000 in two different datacenters.  We do have them clustered together on different networks.     UltraDNS doesn't do any realy fancy load balancing, we just have it set for 50/50 round-robin type with service checking to make sure each node is up and running....  You can setup fialover groups and priorities if you have multiple servers to deal with..   -S ... View more

what is your caching policy? ... View more

Maintenance -> Import/export -> Configuration -> save config as Maintenance -> Import/export -> Accounts (This is important ) as SA devices has all user roles,bookmarks configuration saved here. ... View more

You can certainly accomplish this - a couple of notes:   1- Restricting Login based on time - this would not be done with HC. This would be done through Role Mapping and using custom expressions. So you can build a custom expression that only allows login during "X" times:   Example of Monday to Friday   (loginTime.dayOfWeek = (Mon to Fri) AND loginTime = (8:00AM TO 5:00PM))   You can then do MAC address checking through a Host Check rule using the rule type of "Custom:MAC Address"   In your role mapping rule you can create a custom expression that will look at both "time of day" and host checker results to determine role assignment. ... View more