Hi,   Please work with Juniper Account Team for this feature request, they should be able to take your request to Product mangement team   \Regards, Kannan ... View more

Hi,   I see your query is regarding firewall filters, this forum is only for AAA. please post your question  in the below forum     http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/bd-p/Firewalls Regards, Kannan ... View more

Hi ,   As per my understanding in UAC you cannot limits users to specific bandwidth usage, this option is not available in UAC device. Its only availbel in SA SSL VPN. Hope this clarifies your query   Regards, Kannan ... View more

Hi  Giulianna,   Below are the information that  Junos Pulse collects from the user machine   User Realm Roles Signed in date & time IC Node connected info for cluster Signed in IP MAC Address Agent Type Agent Version Endpoint Security Status   Hope this clarifies your query.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan   ... View more

Thanks for the update mathias Regards, Kannan ... View more

Hi,   As  per my understanding SA LDAP auth server caches the first time results for sometime which helps in catalog search next time   SA fetch all groups during server catalog search, The idea of search catalog is that we want to show all the groups available in the domain and the trusted domains (which could be many) and then allow admin to select from the list.   Regards, Kannan   ... View more

Hi Mathias,   I understand your requirement.   I also believe that your requirement should be possible using UAC and Beacon Endpoint MAG SM360 profiler solution. I have seen customers profiling based onport numbers, mac address etc.   However I recommend you to work with Juniper support  on this since its needs confirmation from GreatBay support who are the OEM vendor for this profiler device.   Hope this should resolve your query.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Yes this is possible and I have seen this working in many sites   You need to have Radius attribute request policies configured for each SSID and enable this request policues under respective relams under Authentication Policy section  where we have authentication server and role mapping rules also enabled.   You can  access the below URL;s to understand more on  RADIUS Request Attribute Policies &   Using RADIUS Attributes in Access Policies   http://www.juniper.net/techpubs/en_US/uac5.0/topics/concept/uac-l2-radius-request-attributes-overview.html   http://www.juniper.net/techpubs/en_US/uac5.0/topics/task/configuration/uac-l2-radius-attributes-policy-configuring.html   Hope this helps,   Regards, Kannan ... View more

Hi Henry,   Yes  your understanding is correct    Regards, Kannan ... View more

  Hi ,   Check this KB links and see if iy helps   http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB28610&actp=search&viewlocale=en_US&searchid=1318127223041   http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB26789&actp=search&viewlocale=en_US&searchid=1318127223041   Regards, Kannan ... View more

Hi Billiam,   I looked in to the attached alert message  that you see it as part of pulse upgrade.   The Alert message states only about a system restart required for pulse upgrade with new components.   If you click OK pulse instllation should complete after the  machine rebooted. I hopethis is working as expected.   Hope this clarifies your query.   Regards, Kannan ... View more

Hope you have check my previiuos post and got the answer for your query.   IF you still need clarifications I suugest you to work with Juniper Account Team   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Thanks Neo, glad that the suggestion helped   Regards, Kannan ... View more

Hi, As per my understanding Juniper SSL VPN can only work with Juniper IDP as a senor for co-ordinated threat management.3rd party IPS is not supported. You can find more information about this in Juniper Admin guide under the topic sensor.   About NAC solutiion, Juniper SSl VPN can be integrated only with Juniper Unified Acces control device and not with 3rd party devices. This can be possible by enabling IFMAP federation feature.   Hope this answers your query.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi, I understand your query.   You can access the below URL to understand on how to configure LDAP server instance in SA device.   http://www.juniper.net/techpubs/software/ive/guides/howtos/how_to_create_ldap_server_instance.pdf   Refer page#192-201 in Below SA admin guide URL for more information about testing and configuring LDAP server .   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/junos-pulse-secure-access-service-8-0-adminguide.pdf Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Thanks for the update  Giulianna ... View more

Hi,   Does this issue happens everytime you logoff or shutdown? if your answer is yes I recommend you to open a Juniper support  case since its needs detailed debugging using pulse logs.   However if you are not using latest edition of pulse, can you try installing the latest version of pulse, install it and reboot the machine once after pulse is  installed. Then try replicating the issue, I hope the issue might not happen after new pulse installation.     Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi,   I am glad that my suggestion help you   Regards, Kannan ... View more

Hi Sammy,   Windows 8.1 is supported only for desktop mode pulse clients, there is no pulse clients for mobiles with respect to windows phone . Its availble only for android and IOS devices. The same is mentioned in the belwo supported platform list of SA 8.0 version. There is no support information for windows phone.   http://www.juniper.net/techpubs/en_US/sa8.0/information-products/topic-collections/Junos-Pulse-Secure-Access-Service-Supported-Platforms.pdf   So this is working as expected, if you need to know the support roadmap and more information on this I recommend  you to work with Juniper support.   Hope this helps.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Hi Mike, I have seen this issue. On most clients I have to uninstall pulse, any other vpn client, and anything else loaded into the driver stack. Then run from an admin cmd shell netsh int ip reset reset.log netsh winsock reset Reboot and reinstall. Hope this helps. Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks! Regards, Kannan ... View more

Hi Nauman,   Thanks for your update.   I now understand that you are trying to use  junos pulse on iphone with MAG 4610 for UAC L3 enforcement.   As I updated earlier we don't have junos pulse client  for mobile phones like iphones, android phones.   This will not work since there is no pulse client on UAC specifically for mobiles. You need to use ntaive supplicant for dot1x connection and for L3 connection you need to use agenless access based on Browsers.    Hope this clarifies your query.       Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan   ... View more

Hi Elena,   Hope you have enabled password managment option under Realm >Authentication Policy>Password in SA admin GUI.   I don't think  we enable lockout options with in SA other than what you mentioned  in    System - Configuration - Security - Miscellaneous.   Can you check at your LDAP Server side event logs on why the account being locked, do we see multiple attempts as expected and configured?   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan ... View more

Yes this might help   Regards, Kannan ... View more

Hi Nauman,   I hope you are using junos pulse for SSL VPN connection because we don't have junos puls e clients for UAC dot1x authentication on mobile devices.     Thebelow knowledge base link deals with   'Connection Error: The Server aborted the connection' error message is generated when launching Junos Pulse on iOS. This is same as your issue. This KB link also has teh cause ans solution.     http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB23046     Check if there is a VPN Tunneling Connection Profile created and mapped to the user Role, to which the user belongs. The VPN Tunneling Connection Profile on IVE can be checked under  Users > Resource Policies > VPN   Tunneling > VPN   Tunneling Connection Profiles : If there is no profile created for the role, click  New Profile  and provide either the valid IP address pool or the DHCP server and map the profile to the correct User Role. When the SA Series device receives a client request to start a session, it assigns an IP address to the client based on the IP address policies, which are defined either through DHCP or the IP address pool.  If you do not have any VPN Tunneling Connection Profiles configured, the Junos Pulse client will not be able to obtain any IP address; subsequently the  Connection Error: The server aborted the connection  error message will be generated.  For more information on requirements to assign an IP address, refer to  KB22889    Hope this Helps.   Note: If I have answered your questions, you could mark this post as accepted solution, that way it could help others as well. Kudo will be a bonus thanks!   Regards, Kannan   ... View more

Hi Natasha,   I am glad that the suggetsion provided helped you Regards, Kannan ... View more