- Pulse Secure Community
- :
- About rnperki_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
rnperki_
Occasional Contributor
17
Posts
0
Kudos
0
Solutions
11-21-2011
03:22:AM
I have setup our SA4500 to check AD group membership for role mapping and it is working a treat. I setup the AD groups searched for them under Server Catolog and they show up and add them in. However we have now created some new AD groups but they are not showing up when doing and LDAP search. The account has been given Domain Admin priv it appears it cannot see large chunks of our AD. Has anyone come across an issue like this when doing LDAP lookup on the SA4500 Running Windows 2008 single domain. Thanks Roger
... View more
09-07-2011
06:16:AM
I have an SA4500 at our primary site and another in our DR site. I have previously worked with Cisco VPN and the IPSEC client where you could specify backup devices that if you could not make contact with the primary site it would automaticlaly try site2,3,4 etc. Now I am working the the SA4500 SSL solution and can find no obvious way get the client to try a secondary site if it cannot connect to the primary. Can anyone tell me if this is possible or not? Thanks Roger
... View more
07-25-2011
06:06:AM
I have just discovered the Meeting function of our SA4500's I have a question. If I am the meeting organiser am I able to do this from the LAN side of the box or does all this setup have to be done whilst connected to the VPN? We want to use it as a support tool and getting our support team to disconnect from the LAN and VPN onto a wireless is going to be a pain. Can anyone tell me how to setup a meeting from the LAN side of the VPN appliance and also how to remote control a machine. Thanks Roger
... View more
06-08-2011
04:37:AM
Perfect - that was exactly the fix - customer is happy Many Thanks Roger Magician
... View more
06-08-2011
12:21:AM
Thanks I will get them to check about SP2 the polices are good as it works on my test machine and one of their PC's but not on two others. Roger
... View more
06-07-2011
07:01:AM
I have a few users who are getting an error when using terminal services bookmark to rdp to a server. This works fine for my test machine and for other users in the same remote office, however some machines all running IE 8 get the message "The client could not connect to the remote computer. Remote connections might not be enabled....." As I say it works for myself and other users in remote site. What does IE need to be able to run this? Is there a specific rpd / active x file it uses for this can it be updated Thanks for any help Roger Running Sa4500 cluster 7.1R2
... View more
05-17-2011
12:44:AM
Got it working! my USER search had to be changed to <USERNAME> I can now see all my AD! Thanks for your help Roger
... View more
05-17-2011
12:16:AM
Thanks for the tips - still getting empty searches! I have a Juniper expert looking at it today, will post the working solution when I get it going. It is a 2008 AD server and he said I need to tick the box that says this server is 2008 I have not got that option, running 6.5R2 - need to upgrade!
... View more
05-16-2011
06:27:AM
OK I have added server as an LDAP server Specified Authentication Required - which seems to be ok Finding user Entries Base DN dc=red,dc=company,dc=local Filter cn=* Not sure what to put in Determining Group membership? I tried dc=red,dc=company,dc=local cn=VPN When I go to server catalog - Click search I get nothing? How do I run a debug on this to see where it is failing? Thanks Roger
... View more
05-16-2011
03:46:AM
I would like to match an AD group membership and map it to a Role on my appliance. I have gone into Auth Servers and added my DC and tested connection which is ok. I am now a bit stuck in how to get the IVE to query AD to check if a users is a member of a specific AD group. which I then want to map to a role. Any examples on how to do this or what you have done and I am sure I can adapt it to fit my environment. Roger
... View more
04-15-2011
02:58:AM
One more quesion? Under Role Mapping how do I specify and AD Group attribute? Thanks Roger
... View more
04-15-2011
02:43:AM
Great thanks I will look into that later - I also need to tie in RSA as well. Thanks Roger
... View more
04-14-2011
07:26:AM
Is it possible using an SA4500 SSL VPN session to make the IE window close down after connection has been established? I have enabled the setting to auto-start the Network Connect but the users are left with an IE window that says Welcome to the Junos Pulse Secure Access services Network Connect - Start Even though the session is connected they still want to click on the start button. I would rather this IE window closed after a successfull connection? I have not looked into the PULSE client? Not sure if this is a better option? Thanks Roger
... View more
04-14-2011
04:52:AM
I am running a Juniper SA4500 6.5R2 I have an RSA server for authentication and AD (nothing much setup yet) My ideal solution is to have users in AD groups and when they VPN they get assigned a range of IP's relevant to their AD group membership Do I have all I need to make this solution happen, I am used to Cisco and getting used to the difference in the Juniper box. I was experiementing with different urls going to different ip ranges, but would rather have a slicker solution with Radius / AD groups etc. Any help appreciated. Thanks Roger
... View more
04-14-2011
04:05:AM
I have found the answer - Detailed Rules! Allow - site subnet Allow - site DNS servers Deny - all other inernal networks Allow - * Works a treat
... View more
04-14-2011
03:35:AM
I have just setup a User Role, only alllowed to be able to connect to SSH to a few specified devices. I created the Session details and when I log in to test they all show up when I click them I get a Red Cross in the IE Window. Is there anything I need to configure on the SA4500 or is this a user PC issue? Thanks Roger
... View more
04-14-2011
03:19:AM
I need to configure our SA4500 to permit vpn access to a remote site only - however I also need to permit them to get to the internet through the main site Websense. I have configured a Network Connect Access Policy to permit 10.100.10.0/24 under resources However I am not sure how to deny all other internal networks but allow access to the internet Split tunnelling is not allowed traffic has to go back through main site. Under resources tab: 10.100.10.0/24 Then I need to have a deny 10.0.0.0/8 permit anything else?
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
