About imanenvoy_

zanyterp_ · ‎06-28-2013

i can't speak to everyone's experience as i don't deploy it to mass users, but for me as a user, it has been very good.

imanenvoy_ · ‎06-28-2012

thanks for the help. Links work fine on OSX if I start NC first. I think that's just the way it's going to have to stay.

zanyterp_ · ‎04-19-2012

I checked on the Apple site and confirmed VPN on Demand is for domains/server names only; IP is not supported (http://images.apple.com/iphone/business/docs/iOS_VPN_Mar12.pdf)

zanyterp_ · ‎04-10-2012

is it possible to remove the unique MAC requirement? otherwise, non-MAC restrictions will be needed

zanyterp_ · ‎09-15-2011

The IVE login variables are not available to the script. If the script AND the script location do not require specific credentials for access, then this should work. If either is false, for example a specific username is needed for the script to run for the drives, it will not work; if the script is on an AD-protected server and users must authenticate for acces, this will not work if they are using non-domain PCs on non-cached credentials

zanyterp_ · ‎08-25-2011

That is when you are using the LDAP server type talking to an AD server on the backend. It is in the section regarding LDAP password management and notes about specific policies applicable to the specific LDAP servers the IVE can communicate with (e.g. AD). The table on page 164-165 (using the 7.1R1 admin guide) it shows what you can get with the AD/NT server type.

RexPGP_ · ‎08-04-2011

To finish you no longer need domain only ID password. I did have to set server to generic and unencrypted. Also loose pwd reset external. AD hold attribute <userAttr.userPrincipalName> that is [email protected] You can use that in SSO if you want.

imanenvoy_ · ‎05-18-2011

Thanks all for the feedback. My setup has my vpn groups in one domain but my users are from various domains. I had Trust and everything checked and could authenticate but could not get groups to be read. Policy trace is a great tool but I finally used the tcpdump tool and saw that the VPN was doing a DNS query on the domain with the wrong domain name. corp.companyname.com instead of corp.internal.companyname.com. I added internal.companyname.com to my domain name list and everything started working.

RKB_ · ‎01-23-2011

Since each access mechanism (web rewrite, NC, SAM, pulse) are different in the way they work, there cant be one global policy for all, as it defeats the very purpose of having these variety to suit different customer requirements. Based on what type of access you choose to provide to end users you can configure one global policy within that access type to be applied when users get mapped to specific roles.

mattspierce_ · ‎01-14-2011

Anything with a FTDI chipset should work. http://www.ftdichip.com/ I grabbed a fairly cheep unit off Amazon a few months ago and havn't had any issues since.

imanenvoy_ · ‎12-28-2010

I'm working on some custom pages and I notice that when I use welcome FILTER verbatim I get the generic "Welcome to the" portal FILTER verbatim outputs "Instant Virtual Extranet" That's just an example there are several. And also the "username" & "password" field labels appear in all lowercase -I know CSS could fix I guess but it would be nice to have a setting. And since I'm using a custom page I don't have a place to enter "Custom Text" like on default based sign-in pages. I know I could just put my own welcome message in the .thtml but having all these in one file/place would be nice. Is there a way in some .thtml file or other to set these for my custom pages?

imanenvoy_ · ‎12-28-2010

We have some internal sites that have links to external sites. Going through the portal the external pages are getting blocked because the web ACL doesn't allow the traffic. There isn't a way to track down every current and future link that could come up. Is there any way to easily get IVE to allow access to external sites? Thanks.

imanenvoy_ · ‎12-28-2010

Wow thanks for the info. Like I mentioned we have a lot of users, really vendors and support people not typical "users". So we like to lock them down only to the IPs they really need. But we don't lock down port. The access is so diverse that we can't really say or know what port level access users would need. It just varies too much. And I'm working on the migration and finding I'm going to have to copy the same IP or network list into mulitple areas, (web, telnet, pulse, etc). Is your setup the same? Am I missing something? Seems like a single global area where I could say "This role gets access to these IPs over these ports" would work better.

imanenvoy_ · ‎12-28-2010

Anyone have a way to set lower timeouts for mobile devices?

imanenvoy_ · ‎12-28-2010

Looking at setting up a couple of SAs in A/A. I understand that any address pools need to be split between the 2 devices and static routed to each. So if an active box goes down any users connected aren't going to auto-connect to the other box, correct? What about users that are using just the SSL VPN or SAM will they see a disruption in service? Any other gotchas or issues with an A/A? Thanks.

imanenvoy_ · ‎12-28-2010

I'd like to offer Pulse to those platforms that can use it and Network Connect for any Mac and Linux users. But my userbase are vendors and users we don't directly support and would like the Pulse/NC offered through the portal rather than seperate download. Anyway to have Pulse and NC on the same portal page or one or the other based on platform the user is signed in with? Also anyone figured out a way to have timeouts different for Pulse mobile and PC install? Thanks all.

imanenvoy_ · ‎12-28-2010

Is there an easy way to see the available and/or historical use of IPs in a pool? Looking to see how much availability is in a pool.

Re: SA upgrade and migration to Pulse

Re: xenapp over portal? Require SAM?

Re: vpn on demand

Re: cisco voip and ssl vpn mac address

Re: network connect startup scripts

Re: AD Password management -good doc?

Re: Using LDAP to login with domain\username Possi...

Re: AD Domain account what is all this?

Re: Global restrict policy?

Re: Win7 64bit friendly USB-Serial adapter?

default variables for custom pages?

Intranet site with internet links?

Re: limit of number of roles or policies?

Re: Timeout for pulse mobile

active/active how disruptive for end users?

Offering both Pulse and NC multi-platforms support...

available IPs in a pool