Is there a way to see which connections from a NetworkConnect client are blocked by the NetworkConnect Access Policies (ACL). I expect this to show up in the User Access log but it doesn't. I would like to know whena user makes a connection to host:<port> but it's blocked per the NC ACL. Thanks! ... View more

As a user of JSAM, something is unclear to me about NC/WSAM. Does the version of NC/WSAM that is in use by client have to be the version that comes with the version of IVE that is in use on my SA-3000s? For example, can I install the NC/WSAM from IVE 5.5, upgrade my Netscreens from IVE 5.5 to IVE 6.0 WITHOUT having to also upgrade NC/WSAM on all the clients? ... View more

I'm running a dozen or SA-3000s here (hopefully getting some SA-2500s soon) and we use JSAM. According to the IVE 5.5/6.0 Supported Platforms for JSAM: "*Editing of hosts file and modification of registry values is not available on Vista platforms". How are people handling this issue on Vista? Without the ability the modify the hosts file, JSAM is useless to us. Thanks! ... View more

I've been experimenting with IVE 6.0R3.2 and IVE 6.0R5 on our aging SA-3000s.  A few problems I've noticed in my simple environment. 1) JSAM fails to load under IVE 6.0 with Windows 2003 Server clients.  Yes I I know this isn't a supported client but JSAM under IVE 5.5 works great with Windows 2003 Server clients.   Tested with Sun Java VM 1.6.0_05 and 1.6.0_06 and IE 7 and Firefox 2.0.0.14.  Java VM console window shows: java.lang.NullPointerException     at java.io.File.<init>(Unknown Source)     at aa.a(Unknown Source)     at d.a(Unknown Source)     at CSApplet.start(Unknown Source)     at sun.applet.AppletPanel.run(Unknown Source)     at java.lang.Thread.run(Unknown Source) basic: Exception: java.lang.NullPointerException And firefox.exe and iexplorer.exe start consuming memory almost like they're memory leaking. Switching the SA-3000 back to IVE 5.5R3 or IVE 5.5R5 and the Windows 2003 clients load JSAM just find. 2) With IVE 6.0R5 and Firefox 2.0.0.14 and Sun Java VM 1.6.0_05 or 1.6.0_06, when a username/password authenticated (local AAA, RADIUS, etc.) user logs out, a few seconds later he is prompted for a client certificate by the Sun Java VM.  Very strange!  Happens with multiple clients, Windows XP SP2 and Windows 2000 SP4.  We use https://<fqdn-of-sa-3000/ sign-in page for client certificate authentication realm and https://fqdn-of-sa-3000/local sign-in page for username/password authentication realm.  I suspect when a username/password user logs out, something is being redirected to the root URL, client certificates.  Switching the SA-3000 back to IVE5.5R3 or IVE 5.5R6 or IVE 6.0R3.2 eliminates this problem. Oh well, IVE 6.0 is too buggy for me at the moment. ... View more