Junos Pulse for iOS (iPhone/iPad) is just repackaged Network Connect, so it works with IVE 6.5 and later. Junos Pulse for Windows uses it own protocol. It requires 7.0 or later. ... View more

I use it regularly to host over 50 users in a single meeting. I've seen issues at about 100 users, but I haven't looked into it. That size happens very rarely. ... View more

I've always recommended that you don't go over the number of users the box is rated at. That is what is tested and supported. So, if you have 500 users licensed, you can have 500 ActiveSync connections. ... View more

If you use the Blackberry Browser (the built-in version) then you don't need SSL-VPN, as it gives you internal access. Just create the home page of the BB browser to be the internal server (intranet.company.com). ... View more

Have you tried Firefox and/or a different machine? What hardware/software are you using? ... View more

If you are looking for IPSec functionality, then I wouldn't suggest a SSL-VPN. The SSG firewalls are compatible with (almost) any IPSec client. You should look into those. ... View more

The display is wrong. If you have a SA-1/3/5000 it will display as SA-2/4/6000, but unit is still the original model. You cannot load any code after 6.0 on any of the SA-1/3/5000. If you look at your Hardware ID, you can figure out which model you have: SA10 - SA1000 SA30 - SA3000 SA3F - SA3000-FIPS SA50 - SA5000 SA5F - SA5000-FIPS ... View more

Under Configuration>Security you find Lockout Options that control Rate, Attempts and Lockout Period counters. ... View more

It depends on what you define as "works." The problem is there is no way to differentiate between the host IP and the bridged VMWare client IP. So source IP enforcement won't work. The client will authenticate, but the host will also be allowed. ... View more

@lto wrote: edit: are these numbers published anywhere on the website? I could not find them, which is why I created a topic on the board. No. They are what JTAC will support. That's why we have JNet. To get out relevant and important (to you) information. Welcome! -Go NY Giants ... View more

Justin, The ICE license cost (list) about 25% to 35% of the "full" license for the box. I know you are not using the full license capabilities of the SA-6000, but if you were, you would think the pricing is great. ICE license doesn't ever expire, if you don't use it. If you use it, it depletes in 5 minute increments. Work with your Juniper reps. I have heard of equitable deals worked out in DR situations. -Go Giants! ... View more

How many new user sessions per second a single IC6000 can accept? 8 to 10 per second for the average. Less if you have a complex Host Checker policy. How many user sessions a single IC6000 can maintain? 20,000 What about these numbers in a cluster of 2, 3, or 4 ICs? 2 = 20,000 (A/A or A/P) 3 = 30,000 (A/A/A only) 4 = not supported For A/A or A/A/A you need a load balancer. See the Admin Guide for instructions. We are currently using UAC 2.2 R3. Is this the same for 2.2 R4 or the new 3.0 R1? No difference for 2.2r3 or 2.2r4. 3.0 numbers have not been published yet. ... View more

There is no way to download and/or manually install the Outlook plug-in. It is only available via the SM page. ... View more

All of the URLs on the SA are static. You will need an external solution that understands IP source and URL redirection. You can make a Realm restriction that will only allow a specific subnet to login to a URL, but the user will need to know the specific URL. ... View more

1. If you are using 802.1X and no layer 3, then the scenario you described in option 1 will work. If you are doing any layer 3, then you will need a LB. 2. You will configure 1/2 of the switches with IC A as the first RADIUS servers (IC B as second) and the rest with IC B as Primary for the other 1/2. 3. If you have the IC configured to talk to all of your I.Es. You will be able to do that. If you have more then a single cluster of ICs, then you will need to use UAC 3.0 and it's new Federation feature. UAC 3.0 is scheduled to be released by the end of March, 2009. ... View more

Assuming the ICs in question are NOT clustered, then once you login to an IC, you stay logged into that IC. You can configure OAC to make a Layer 3 connection to multiple ICs, but they are not related to each other. You will burn a user license per IC that the user is connected to. ... View more

There is a command line option for Windows: C:\Program Files\Juniper Networks\Network Connect 6.2.0>nclauncher /? nclauncher [-url Url] [-u username] [-p password] [-r realm] [-help] [-stop] [-signout] [-version] [-d DSID] [-cert client certificate] For example: nclauncher.exe -url https://sa.testing.com -u giantsUser -p password123 -r Users ... View more