Hi,   Please work with Juniper Account Team for this feature request, they should be able to take your request to Product mangement team   \Regards, Kannan ... View more

Hi,   I see your query is regarding firewall filters, this forum is only for AAA. please post your question  in the below forum     http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/bd-p/Firewalls Regards, Kannan ... View more

Hi ,   As per my understanding in UAC you cannot limits users to specific bandwidth usage, this option is not available in UAC device. Its only availbel in SA SSL VPN. Hope this clarifies your query   Regards, Kannan ... View more

Hi  Giulianna,   Below are the information that  Junos Pulse collects from the user machine   User Realm Roles Signed in date & time IC Node connected info for cluster Signed in IP MAC Address Agent Type Agent Version Endpoint Security Status   Hope this clarifies your query.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan   ... View more

Hi,   As  per my understanding SA LDAP auth server caches the first time results for sometime which helps in catalog search next time   SA fetch all groups during server catalog search, The idea of search catalog is that we want to show all the groups available in the domain and the trusted domains (which could be many) and then allow admin to select from the list.   Regards, Kannan   ... View more

Yes this is possible and I have seen this working in many sites   You need to have Radius attribute request policies configured for each SSID and enable this request policues under respective relams under Authentication Policy section  where we have authentication server and role mapping rules also enabled.   You can  access the below URL;s to understand more on  RADIUS Request Attribute Policies &   Using RADIUS Attributes in Access Policies   http://www.juniper.net/techpubs/en_US/uac5.0/topics/concept/uac-l2-radius-request-attributes-overview.html   http://www.juniper.net/techpubs/en_US/uac5.0/topics/task/configuration/uac-l2-radius-attributes-policy-configuring.html   Hope this helps,   Regards, Kannan ... View more

  Hi ,   Check this KB links and see if iy helps   http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB28610&actp=search&viewlocale=en_US&searchid=1318127223041   http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB26789&actp=search&viewlocale=en_US&searchid=1318127223041   Regards, Kannan ... View more

Hi Billiam,   I looked in to the attached alert message  that you see it as part of pulse upgrade.   The Alert message states only about a system restart required for pulse upgrade with new components.   If you click OK pulse instllation should complete after the  machine rebooted. I hopethis is working as expected.   Hope this clarifies your query.   Regards, Kannan ... View more

Hope you have check my previiuos post and got the answer for your query.   IF you still need clarifications I suugest you to work with Juniper Account Team   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi, As per my understanding Juniper SSL VPN can only work with Juniper IDP as a senor for co-ordinated threat management.3rd party IPS is not supported. You can find more information about this in Juniper Admin guide under the topic sensor.   About NAC solutiion, Juniper SSl VPN can be integrated only with Juniper Unified Acces control device and not with 3rd party devices. This can be possible by enabling IFMAP federation feature.   Hope this answers your query.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi, I understand your query.   You can access the below URL to understand on how to configure LDAP server instance in SA device.   http://www.juniper.net/techpubs/software/ive/guides/howtos/how_to_create_ldap_server_instance.pdf   Refer page#192-201 in Below SA admin guide URL for more information about testing and configuring LDAP server .   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/junos-pulse-secure-access-service-8-0-adminguide.pdf Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Sammy,   Windows 8.1 is supported only for desktop mode pulse clients, there is no pulse clients for mobiles with respect to windows phone . Its availble only for android and IOS devices. The same is mentioned in the belwo supported platform list of SA 8.0 version. There is no support information for windows phone.   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/Junos-Pulse-Secure-Access-Service-Supported-Platforms.pdf   So this is working as expected, if you need to know the support roadmap and more information on this I recommend  you to work with Juniper support.   Hope this helps.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Mike, I have seen this issue. On most clients I have to uninstall pulse, any other vpn client, and anything else loaded into the driver stack. Then run from an admin cmd shell netsh int ip reset reset.log netsh winsock reset Reboot and reinstall. Hope this helps. Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks! Regards, Kannan ... View more

Hi Nauman,   Thanks for your update.   I now understand that you are trying to use  junos pulse on iphone with MAG 4610 for UAC L3 enforcement.   As I updated earlier we don't have junos pulse client  for mobile phones like iphones, android phones.   This will not work since there is no pulse client on UAC specifically for mobiles. You need to use ntaive supplicant for dot1x connection and for L3 connection you need to use agenless access based on Browsers.    Hope this clarifies your query.       Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan   ... View more

Yes this might help   Regards, Kannan ... View more

Hi Nauman,   I hope you are using junos pulse for SSL VPN connection because we don't have junos puls e clients for UAC dot1x authentication on mobile devices.     Thebelow knowledge base link deals with   'Connection Error: The Server aborted the connection' error message is generated when launching Junos Pulse on iOS. This is same as your issue. This KB link also has teh cause ans solution.     http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB23046     Check if there is a VPN Tunneling Connection Profile created and mapped to the user Role, to which the user belongs. The VPN Tunneling Connection Profile on IVE can be checked under  Users > Resource Policies > VPN   Tunneling > VPN   Tunneling Connection Profiles : If there is no profile created for the role, click  New Profile  and provide either the valid IP address pool or the DHCP server and map the profile to the correct User Role. When the SA Series device receives a client request to start a session, it assigns an IP address to the client based on the IP address policies, which are defined either through DHCP or the IP address pool.  If you do not have any VPN Tunneling Connection Profiles configured, the Junos Pulse client will not be able to obtain any IP address; subsequently the  Connection Error: The server aborted the connection  error message will be generated.  For more information on requirements to assign an IP address, refer to  KB22889    Hope this Helps.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan   ... View more