I have two 6600 SA and I need to create a reverse route to a floating IP for redundancy . I cant point to Internal VIP for technical reason.   Is "Vlan Virtual Port" (Networks > VLANs > Virtual Ports) the same as HSRP/Internal VIP?     ... View more

Hi everyone,   I have 10 discontiguous public IP subnets (/24) and 2 groups of users, staff and students. I was told that I have to create 10 vlans (one for each subnet) and create 10 roles and asign it to 2 realms.   Is this the best way of doing it? I dont want to use private Ip as we need to keep track of the users activities.   What is the best way to setup so that when the  staff user sign in, the vpn will allocate an ip address for the user on the staff subnet/vlan and check that the subnet is not runing out of IP address, same goes for student user, sign in and get a stduent ip adress on student subnet/vlan   ... View more

I have 2 of 6611 running in active / standby mode.   Currently we have about 400 concurrent users and potentially triple in the next few months (up to a few thousand users).   The problem is the VPN uplink supports only 1Gb, according to this specs https://www.juniper.net/us/en/products-services/security/mag-series/mag6611/#specifications   I prefer using active stanby mode.   Are there anyways to address the bottleneck problem?     ... View more

I have several customise signin pages. On these pages, you have to define the realm name an it has to match the name define in the role. If I change the name on the role, the signin page will break. Anyone encounter this issue? is there a fix for this? ... View more

One of the kb suggested that udp 4500 traffic should be allow from end to end in order to establish a tunnel. If we enable the ESP as the transport mode, the default port is 4500 udp. What port does it use if the ssl as a transport mode? Still udp 4500? ... View more

I have added 4 URLs for web rewrite, 2 URLs are can only be access internally an 2 URLs are publicly accessible. When Estanlish a SSL VPN session,I can access all 4 URLs however the first two internal URLs are prefixed with https://www.internalpages.com . When I try the 2 public accessible URLs this is not present as though it is just doing a redirect and not going through the SA. My question is, If the wepage is publicly accessible, will the SA ignore web rewrite? Policy trace showing no sign or error. Thanks all ... View more

When logging in on the web browser, I get the the IP address Im after. However, when logging in using network Connect, I get an Ip address in different subnet. Anyone encounter this problem before? Im running 7.2 R2 ... View more

I have a number of active VPN connections ( under System > Status > Active Users), some connections have VPN tunnelling IP address assigned and some dont (see attached screen shot) Anybody know why? ... View more

I have a number of intranet web pages that need to be access via the VPN. What are the best ways to access intranet web pages? I was thinking of creating a URL/sign in page that point to each intranet webpage but against the requirements as the aim is to hide the intranet web pages from the Internet. Alternatively, I could create a bookmarks for all the intranet webpages and get users login via the web browser and click on the links. Is it possible to load says a intranet page automatically after user sign in to the SA via the browser? I understand you can do this with NC. ... View more

I've create a bookmark go a file server. I can see the bookmark when login using laptop/pc/Mac, but when I login to Pulse on my iphone, i cant see the bookmark. What have I missed? I'm running on 7.1r6 ... View more

Ive configured "Connection Settings" under Resource Policies to use transport mode as ESP. How come some users are still using SSL ? Any ideas? ... View more

I have split tunneling disabled on my SA as I dont want the user pc to be the bridge between the public and our coporate network. I understand that when disabling split tunneling all network traffic on my mac will go though the tunnel. However, after NC establised the serssion, and I do the netstat -r, I see two active gateways: Destination Gateway Flags Refs Use Netif Expire default 172.16.1.1 UGSc 23 111 jnc0 default 192.168.1.1 UGScI 6 0 en0 127 localhost UCS 0 0 lo0 localhost localhost UH 4 1718 lo0 172.16.1.1 localhost UGHS 1 0 lo0 Why is that only 172.16.1.1 go through the tunnel and not 192.168.1.1 ? With "Allow access to local subnet" I understand that it preserves the route on the client and retaining access to local resources such as printers but does it force ALL traffic to go through the tunnel like disabling split tunneling? Is it possible to force all the traffic to go through the tunnel while allowing access to the local network like printing? ... View more

Is it possible to disable Session lifetime Max session length, if so, how. Why use session length when you already have idle timeout. ... View more

I want to give a user with access rights to view the user access logs. My understaning is that they can view the user access logs if they have admin priviledge? Is it possible to create an admin account and restrict admin access, e.g user A can only view user access logs, user B can only work on the Sign In Policies and Pages. ... View more

I want to resize Network Connect (NC) window, is it possible? If so, where can I edit it? The SA is a good tool but the signin html creation is a nightmare. ... View more

Ive download the sample thtml zip files. I want to modify/remove the text on NC "welcome to Instant Virtual Extranet". Which thtml file does NC uses to display text info? ... View more

Everytime a user sign in I see this error mesage in the user log : Info ERR24670 xxxxxx-Network Connect: ACL count = 0. There's a post similar to my error message. In the post, the user found that the dhcp wasnt enabled. But not for my case, ive check my dhcp configuration is it is set to "enabled". I'm still getting the error message. Any ideas? Thanks for sharing. ... View more