- Pulse Secure Community
- :
- About Jickfoo_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Jickfoo_
Super Contributor
271
Posts
0
Kudos
13
Solutions
03-24-2013
07:55:PM
Hi Justin, What is the SA Build currently deployed? what is the backend Authentication server os with service pack if any? Regards, SVK
... View more
10-16-2012
11:29:AM
Thanks for this - it looks really useful! Ken
... View more
08-31-2011
04:39:AM
Thanks..
... View more
01-11-2011
09:45:PM
Not all rewrite issues will have a rewrite fiter developed. Juniper engineering writes these filters and its decided on a case by case basis.
... View more
01-05-2011
06:13:AM
Gotta rewrite because the users arent local. I ended up using Passthrough Proxy. I had to open a port to the SA but it appears users automatically redirect to this after the login. A nice little feature. The old javascript works now. Kind of slow but functional.
... View more
08-11-2010
06:57:AM
@ SonicBoom - Did you try it with the Droid Incredible? Did it work ok? We might have a number of HTC Droids coming in and this would be a great way to make them more useful! Also, we are running on our SA-4000 R6.2 right now, it sounds like I should just go to 7.0 and skip 6.5 to get the most out of the Pulse? Or should I maybe wait till the next ver?
... View more
05-27-2010
12:36:PM
i have not seen a way but i am pretty sure someone with enough Java experties can write a small code to do this
... View more
05-03-2012
10:17:PM
the control channel has always been over the NCP tunnel. yes, the key lifetime is only for ESP connections; if you are using the NCP/SSL connection, there is no separate key
... View more
10-27-2011
05:39:AM
Hi Timo, I made and posted a new version. Follow this link and download the .zip file. http://forums.juniper.net/t5/SSL-VPN/GoAwaySa-Updated-Uninstaller-Script-of-all-Workstation/td-p/115354 Good Luck
... View more
06-01-2010
04:48:AM
Mazhar, Yes, I've been told that the control data for the session always flows over TCP 443. If this is true then I dont understand how your sessions could be working. I would check your firewall logs to see if you have both 443 and 4500 coming from a client. Justin
... View more
03-22-2010
09:48:AM
Guys, I started a new main topic about the uninstallers and attached the current scripts. Let me know if they are of any assistance.
... View more
01-04-2010
11:03:AM
I ran into the issue with OWA 2003 and basic auth. There is a thread on the front page right now about it. I only upgraded on Saturday so I haven't tested everything that I was hoping it would fix, but I will let you know. Three of the things I was hoping it would fix are: Websense Remote agent and NC issues Filesharing w/ WSAM that doesn't work. Windows/Domain password sync w/ WSAM.
... View more
09-30-2009
07:16:AM
Justin - see my responses to your questions in italics below - So you split up your cluster and then applied the 8-week one to the new box ? Then when people were converted, you rejoined the cluster and applied the old license to the box ? Is that correct ? We applied the 8-week license to the SA which originally had the cluster license on it. This allows it to run standalone. Then, when we were ready to rebuild the cluster, we deleted the 8-week license, reapplied the original cluster license, and rejoined the cluster. Before you do so, I'd export all the configurations from both boxes. I have thought about pre-pushing new versions of NetConnect but if users log into an older version it typically uninstalls everything else doesnt it ? No. I currently have Network Connect 6.2, 6.3, 6.4, and 6.5 on my PC. If I log into a SA with 6.4 on it, it uses that one. It works differently for most other downloads - WSAM and Host Checker for sure. For those, you are allowed only one version, and if you log into a SA with a different s/w version, a deinstall/reinstall takes place. Also, What version of installer do you push out ? Does it have to be tied to the current code on the box ? Has it resolved issues for you ? I'd check with JTAC on this. My memory on this issue is that there was a change to the installer somewhere around 6.2, and the pre-6.2 installer would not work with Network Connect 6.3. However, the 6.3 installer would work with earlier versions of NC. We use this mostly to help us deal with machines on which the user does not have admin privileges. You must have admin privileges to install the installer, but subsequent installsa of NC, etc. do not require admin privileges. Hope this is helpful. We haven't had the pleasure of our first SA upgrade since rolling out NC to about 80,000 users (so far). Unfortunately, I can't postpone it till after my retirement (about a year out unless the economy stays tanked). Ken
... View more
07-07-2009
08:22:AM
One way (which makes some troubleshooting / tracking users more difficult) is to set up the main authentication to be Anonymous Server and set what your current auth server is (Radius, AD, LDAP, etc) to be an Additional Authentication Server (checking End session if authentication against this server fails). -If you look at connected users you will then see AnonymousUser### though
... View more
07-06-2009
01:14:PM
JTAC helped me find the work-around http://kb.pulsesecure.net/index?page=content&id=KB10522&actp=search&searchid=1246909105418 I tested it and it works.
... View more
06-30-2009
05:32:AM
This was an issue with 6.0R7 and IE8. After putting IE8 in compatibility mode the problem was resolved. Thanks to JTAC, Justin
... View more
09-24-2009
01:31:PM
Backwards compatiblity and forwards compatiblity are two different issues. Backwards should not be an issue for at least one or two versions. This also becomes a major issue when conencting to multiple networks, or using a test network for new firmware. Each connection requires the software to be re-installed over and over. It is quite a hassle.
... View more
03-31-2009
11:24:AM
I've done it both ways but am happier with the internal port on the internal network but behind our IPS. You need to open TCP 443 and UDP 4500. Justin
... View more
03-30-2009
07:59:PM
Justin, The ICE license cost (list) about 25% to 35% of the "full" license for the box. I know you are not using the full license capabilities of the SA-6000, but if you were, you would think the pricing is great. ICE license doesn't ever expire, if you don't use it. If you use it, it depletes in 5 minute increments. Work with your Juniper reps. I have heard of equitable deals worked out in DR situations. -Go Giants!
... View more
03-19-2009
05:41:AM
Wouldn't it be possible to use variables in the bookmarks just as you can do with <USERNAME> when providing a File Bookmark for a user home directory? Only problem would be to find out what variables can be used in bookmarks. I haven't found any compilation of codes and variables available for different places in the config.
... View more
01-29-2009
09:03:PM
The notice you received was due to the End of Engineering (EOE) support coming up. There will not be anymore bug fixes for the 6.0 branch when EOE expires. End of Life basically means that you will be giving configuration support. Here is the EOL page for all SSL VPN branches (6.0, 6.1, 6.2, 6.3, etc) http://www.juniper.net/support/eol/ive.html
... View more
10-28-2008
05:27:AM
I'll try changing to SSL although I try to stay away from it because its slower. The users are behind a small linksys or SMC barricade, which is connected to DSL or cable.
... View more
10-30-2008
11:00:AM
It is a strange one, I would hazard a guess at some network issue between the client and server. I am not aware of any issue with the IVE that has these symptoms.
... View more
09-10-2008
06:18:AM
IC doesn't support the attaching a location group to multiple sign-in policies. regarding enhancement request: please work with your Juniper SE or Juniper Marketing contact. Message Edited by ManojReddy on 09-10-2008 06:49 PM
... View more
09-04-2008
12:25:PM
I just read your posts again and I think I answered my own question. We are going to use multiple IPs. I think we'll only need a few. I'd consider having the users choose a realm but my users would find it annoying. (much like I find them annoying) Thanks very much for your help. Justin
... View more
08-27-2008
11:22:AM
This may not help, but I have found enabling Roaming Sessions in Role Session Options made NC work on several AirCard situations where IP addresses seem to change. -=Dan=-
... View more
09-15-2008
05:02:AM
The problem had to do with permissions on a particular folder. Here is how it was resolved. JTAC found this solution but it took a couple of months. Here's some steps to troubleshoot as well along with the previous email I sent you. 1. Click Start, point to Settings, and then click Control Panel. 2. Click Appearance and Themes, and then click Folder Options. 3. On the View tab, under Hidden files and folders, click Show hidden files and folders. To reset the permissions on these key containers use the following steps: 1. Open Microsoft Windows Explorer. 2. Locate the Documents and Settings\All Users\ApplicationData\Microsoft\Crypto\RSA\MachineKeys folder. 3. There are several files located in this folder. Each file in this folder corresponds to a key container. Try to open each with Notepad. 4. If you receive an Access Denied error message when you try to open a file, open the properties of the file, and then take ownership of it. Reassign the Administrator account Full access. Message Edited by Jickfoo on 09-15-2008 08:03 AM
... View more
08-07-2008
05:19:AM
Thanks.. I may just shut it off and see what happens. I'm thinking that the GZIP may do more harm then good. Especially when the box has to try and compress traffic that is already compressed. Anyone else have any experience good or bad with disabling GZIP Compression on the appliance ?
... View more
08-05-2008
11:41:PM
Perhaps you should consider the helper service: The Juniper Installer Service is designed for customers that have computers (windows based OS only) on which the end users do not have administrative/adequate privileges, however are required to install IVE/SA client side components like Network Connect or WSAM which require elevated privileges. http://kb.pulsesecure.net/CUSTOMERSERVICE/index?page=kbdetail&record_id=0244022611e8310108012c3c190035e7 IVE admin (Maintenance > System > Installers I believe 6.0+ offers this as an MSI, so you should be able to deploy with group policy.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
