- Pulse Secure Community
- :
- About scoutt_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
scoutt_
Contributor
43
Posts
0
Kudos
0
Solutions
04-17-2015
07:24:AM
Has anybody else run into the issue where hostchecker dosn't detect McAfee Plus and says Defender is not up to date? We are running ESAP 2.7.9 and the problem chicd is a windows 8.1 machine. Worked a couple of weeks go and now nothing. Believe the version of McAfee Plus is 16.x
... View more
04-30-2013
11:15:AM
I receive an error when signing it to Pulse. It says that "The certificate is not valid for this server." Now it seems we started getting this error when we renewed our root cert on the SA. Goiing into Safari it shows the cert is invalid as not trusted. We did renew our cert to be a *.domain.com instead of a bunch of certs. It appears that iOS doesn't care for a start cert that covers everything. How do we make it work. Every users ipad gets this error. I do not see any certs in the pulse configuration.
... View more
04-11-2013
03:04:PM
that won't work for me Dan, I also see Real Time Protection is not running. I was told today that OPSWAT will have a fix by the end of the month, April. I was also thinking that what if we looked for the service to see if it is running like some had to on Security Essentials 4.x. Just have Host checker look for it. But not sure if that woudl really work.
... View more
04-05-2013
11:02:AM
hey guess what, they still haven't fixed in with 2.3.5. OPSWAT is still troubleshooting the problem and they cannot reproduce the issue. So the case is still open. I am seeing a similiar issue with McAfee 15.6.245 as well. Very frustrating
... View more
04-05-2013
10:58:AM
dtlam76 , I tried that but then all I get is 'McAfee VirusScan 15.6.245 does not comply with policy. Compliance requires latest virus definitions, which is up-to-date. I have a current case open with Juniper about McAfee support so it may fall in the same lines as this. zanyterp, I see the question come up, I click yes and everythign appears to install nomrally. Except I get the host checker did not install correctly when I try to login. So I am seeing the same thing as the OP.
... View more
02-27-2013
10:17:AM
You are correct Dan, ESAP 2.3.3 still does not fix teh problem. Tech is still looking into it. Yes, it is very frustrating that it is taking so long to fix, but the product that needs fixed is not a Juniper product, OPSWAT, which they do not control.
... View more
02-19-2013
09:50:AM
We add there RDP session and bookmarks, so they do not have acces to do this. They do have access to add meetings, but as far as I can see nobody has done any.
... View more
02-12-2013
01:25:PM
Thanks -red-, mine does actually show that, but I have huge gaps. I have one that last login was 2/6/2012, next one is 6/2/2012, then 12/23/2012, then it jumps to 2/6/2013. so not sure if clearing the log does that but it doesn't help much. We have had this for at least 5 years so there shoud be more. I see in some others that it goes back to 2009 for last login, but those jump around too. but that will work for the most part. Thanks
... View more
02-08-2013
08:10:AM
I see last login time for the last couple of days on that page, but if a user hasn't logged in in a month it won't be there. How long does that last sign-in last? I don't show anything past 3 days. What I was hoping for was to load the user profile and it tell me the last time they logged in, be it 6months or never.
... View more
02-08-2013
07:20:AM
Latest update: It appears to be an OPSWAT issue. The problem is that Host checker doesn't see RTP enabled and the dat version. I am told it should be fixed in the next ESAP update 2.3.3, tentativley Feb 15th. Maybe this update will fix another problem that we have with McAfee 8.8 where it doesn't see RTP being enabled on some machines.
... View more
02-06-2013
11:26:AM
Thanks NULL, I have the cert all setup and it is added to the Realm. This all works fine as the Junos login shows no able to login because missing the cert, expected. Now when we push the cert to the client, VPN doesn't seem to see it. I can't figure out where the cert lives or how to get it into the Junos Pulse browser if thats where VPN looks for it at. does anybody have any idea hwere the cert wil ive on a ipad/iphone ? I don't want to push it after they login, that defeates the purpose. I want to push it to the device before they login this way I can check to see if they have it or not if it allows them to login.
... View more
02-06-2013
08:26:AM
I am trying to find the best way to clean up the user profile lists. I am not seeing a place where it shows the last login of the user. I know how to present the last login time for the user, but that doesn't help the admin if he wants to cleanup users that haven't used it in many months or users that are not on the system anymore. Is there a secret I am missing? lol. running a SA2500 7.1R5
... View more
02-06-2013
08:21:AM
An update for those of you that find this has broke like us. I do have a support ticket open and we are narrowing down the problem. Zanyterp, I have "all" Antivirus products selected.
... View more
01-27-2013
06:54:AM
I am getting the same, we are running 2.3.1 and I can't get in as McAfee is not supported. I have attached the version of my McAfee. I also want to note that 2.3.1 came out in Dec. 12 2012 while McAfee updated on 1/26/2013
... View more
01-03-2013
10:18:AM
Nevermind, I found it. For anybody that is curious, the setting is under Resource Policies - > SSO -> BasicAuth,NTLM and Kerberos policies
... View more
01-03-2013
08:38:AM
is it possible for a user to login to Junos from an ipad and click on a predefined bookmark to go to a internal web application and be automatically logged in to that web app? They would be using Active Directory to login to both Junos and the web app. We have an SA2500 on 7.1 R5 build 19757. So I beleive the Junos Pulse installed on that is 2.1.2.17115. Clients is running 4.1.0.27639
... View more
10-30-2012
01:12:PM
Thanks Dan, that sounds like what we are already using in the MaaS 360 service. I'll see if anybody else has anythiing on what we are after.
... View more
10-30-2012
11:50:AM
well, yes, but using junos pulse on ipads and iphones and such. I am not really worried about desktops at this time. host checker runs on ipads or through junos pulse. I didn't think it did.
... View more
10-30-2012
09:22:AM
my impression was that I had to do a cert request from the device that the cert was going to live on? We have a Enterprise wildcard cert, couldn't I just use the same one then? Also, we send our cert to a respectable cert authority, we don't really want to use an internal cert.
... View more
10-30-2012
08:44:AM
I want to run an idea by you guys. Please let me know if it will work and how to set it up. I have read that I can add a certificate to Trusted Client CA. Now my thought was since we use MaaS 360 for our iphone / ipad / tablet to push apps, that I could setup a cert in our juniper SA2500 running 7.1R5 and then give it to MaaS 360 to push to the clients and then have Junos Pulse look for this cert and if they have it allow them in to the realm. My problem is, in order to add a cert to Junpier I have to create a cert request, so I an give it to another admin so he can create a valid cert I can install. I don't see this option in Junpier. How do we go about this idea if I can't request a cert? Thoughts or am I going down the wrong road? What we are tryign to avoid is, a user installing Junos Pulse and by passing our MaaS 360 to log in to our VPN. Once a user sees how it works on a device that is in MaaS 260, they can then jus tload junos pulse on another device and by pass one of our requirements. How does everybody else do it?
... View more
07-23-2012
02:16:PM
thank you zany, one question though, where does the certificate come from? does the appliance produce it or buy it though a third party?
... View more
07-18-2012
02:50:PM
We recently got MAAS360 and now we can check in so to speak, our ipads and tablets. What we do is push then the Maas360 App and they have to have it to connect to our VPN SSL. That all works great, but if somebody knows the url to go to for our VPN and download Junos Pulse they can get in without having Maas360. We want to stop that and only allow users that have Maas369 installed.We have a (SA 2500 witn 7.1 R5 Build 19757 installed) and I see that I should be able to look for a process or a file but it also looks like it only works for Windows Mobile or Desktops. I also seen I can look for a certificate but not sure if that will work or not. We can push certs with the Maas360 but I am not sure if this is the best way or I am missing something in the SA-2500. Anybody know fo a better more secure way?
... View more
02-15-2012
03:58:PM
Thanks rakeshb, At this time it is not needed but I will keep it for reference. The user is using Microsoft Essentials now. But good to know info.
... View more
02-15-2012
03:55:PM
I have read a vew KB's like the following http://kb.pulsesecure.net/InfoCenter/index?page=content&id=TN211 http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB22244 And the logs show the user signs in but logged out 7 seconds later. The ipad says login was aborted. Now, we can login with Safari but as soon as VPN is selected it gets the same error. I am running 7.1R5 on a SA2500 Info AUT22673 2012-02-15 15:33:23 - ive - [64.13.95.100] Domain\User(ipad)[ipad] - Logout from 64.13.95.100 (session:00000000) Info AUT22670 2012-02-15 15:33:12 - ive - [64.13.95.100] Domain\User(ipad)[ipad] - Login succeeded for AD.JACKSONCOUNTY.ORG\costelme/ipad (session:00000000) from 64.13.95.100. Info AUT24326 2012-02-15 15:33:12 - ive - [64.13.95.100] Domain\user(ipad)[] - Primary authentication successful for AD.JACKSONCOUNTY.ORG\costelme/AD1 from 64.13.95.100 Info AUT23278 2012-02-15 15:33:12 - ive - [64.13.95.100] costelme(ipad)[] - User Limit realm restrictions successfully passed for costelme/ipad Info AUT23278 2012-02-15 15:33:12 - ive - [64.13.95.100] costelme(ipad)[] - Browser realm restrictions successfully passed for costelme/ipad
... View more
02-10-2012
11:42:AM
Yes Kita, we even upgraded to 7.1R5 and still does not work. rakeshb, how do you change that as I am selecting " All Anti-Virus Products" And I don't see a place to change the name. So basically one rule with all selected.
... View more
01-31-2012
07:42:AM
We have ESAP 8.2 and we have a user that says they are on themost recent DAT files. 'VIPRE Antivirus 5.0.5074 does not comply with policy. Compliance requires latest virus definition files.' Yet 8.2 says it supports 5.x
... View more
01-10-2012
10:27:AM
once making the change it all works. Thanks for the help. I suppose ti is not making him admin so all is good.
... View more
01-10-2012
07:15:AM
Thanks Kal, But it appears to me that it is still wanting admin permissions if you allow "permission to Create Computer Objects and Delete Computer Objects in the Computers container." We created a "Service Account" that is not admin and it still wants admin. If we grant thos epermissions than it is not a "user" anymore, correct?
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
