Philly, It doesn't sound like you have Radius configured for authentication? Do you have a Radius server pointing to AD for authentication? You might try searching the Steel Belted Radius docs to see if the RADIUS daemon can read this attribute from AD and use it for authentication. If you can define the "Grant Remote Access" flag as a standard RADIUS attribute or a Vendor Specific Attribute in RADIUS then you can use it to control access. But in order to do so you would need to configure the IVE to use RADIUS authentication and point to a RADIUS authentication server for this user realm. ... View more

http://kb.pulsesecure.net/CUSTOMERSERVICE/index?page=kbdetail&record_id=0244022611e8310108012c3c1900420a IVE does not support multiple web server certificates. In order to be able to connect to the IVE using *.company.com, a wildcard certificate should be used instead. ... View more

Hi Wyle, Not sure if this is a bug in 6.1R2-1, but here is a URL that may help you troubleshoot this issue. If this doesn't help you may want to contact the TAC and have them help debug your issue. http://kb.pulsesecure.net/kb/documents/public/IVE/SA-SM-Admin-Help/wwhelp/wwhimpl/common/html/wwhelp.htm?context=SA_Admin_Help&file=chapServers-22.html#wp1057353 ... View more

Fedora Core 5 is supported so my hunch is that 9 has not been tested but will work. Here is a pointer to the SSL VPN Resolution guide, it should point you in the right direction. http://kb.pulsesecure.net/kb/documents/public/resolution_path/J_SSLVPN_RemoteAccessResolutionPath.htm ... View more

Yiming, You can configure the IVE to automatically sign into resources after a user logins in. I don't know of any way to automatically log a user into the IVE as you are trying to do. http://kb.pulsesecure.net/kb/documents/public/IVE/SA-SM-Admin-Help/wwhelp/wwhimpl/common/html/wwhelp.htm?context=SA_Admin_Help&file=chapSSO-03.html ... View more

What version of IVE OS are you running on your SA2000? Generally if a user loses their session it will automatically reconnect and resume their session. It sounds like they are acquiring a new IP address which causes the IVE to force them to relogin. There are a few settings in the IVE that you can tweak for session timeouts and reconnects. If this doesn't help out you can contact the JTAC and they can help you troubleshoot the problem. ... View more

I'm assuming that this is via the IVE Portal and not Network Connect? It looks like the IVE Proxy is choking on something in the session data. You may want to contact the JTAC and ahve them walk you through grabbing a trace so they can debug the problem. ... View more

Hi SilicaGel, Your post seems to be in the wrong forum. This section is for the SSL VPN product aka IVE platform. You may want to repost your question under the "Firewalls" discussion group. ... View more

JSAM is not supported in Win2003 server but WSAM is.  http://www.juniper.net/techpubs/software/ive/6.x/r eleasenotes/SA-SupportedPlatforms-6.0.pdf Luke Skywalker Sr. Jedi Knight ... View more

Looking at the release notes for 6.0 it seems like there are many timeout issues that have been fixed from 5.5 to 6.0. http://www.juniper.net/techpubs/software/ive/6.x/6.0/ Is this problem happening across all of your users or just a select few? There were some known issues where a user with more than one browser logged into the IVE would cause session problems. From your description it sounds more like an internal issue in the IVE that an upgrade to 6.0 or 6.1 would address. You may want to open a case with the JTAC to confirm if this is a known issue before going down the upgrade path. Also, what type of authentication server are you using (RADIUS, LDAP, AD)? ... View more

Hi Sylvain, The IVE Clustering uses a virtual IP address to load balance so no external load balancer is required. Once you cluster the IVE's together they will appear as a single system to users. ... View more

If you can mount the folders via FTP, HTTP, NFS or CIFS then you should be able to do this with the SSL VPN box. Otherwise you would need to run Network Connect and connect from the remote node directly tot he NetWare server. You may be able to setup a local service that will provide access to the NetWare server using one of the above mentioned protocols so that the IVE can see and serve the content via it's web portal. What protocol does NetWare use to serve up folders? ... View more

Hi Graham, What version of IVE OS are you running on your SA700?  If this user conencts to the IVE Web portal do they experience the same disconnects?  I would recommend that you setup a test using either Netperf, iPerf, or IOMeter between a server in your DMZ and this user's PC.  Do you have any backup VPN like PPTP that this user can connect to to compare performance?  Finally, what type of router does the user have in his home network?  Is he on a wireless connection to that router, and if so have you had him try connecting directly to the Satellite Modem/TNC?  Obviously this could be anything but the likely culpret is some level of packet loss ocurring on the far end of the connection because of dish misalignment, trees obstructing the view, home wiring, etc.  The user probably doesn't see any problems with regular web browsing as TCP/IP is fairly tollerant of timeouts and retries.  Encryption algorithms are far less tollerant to dropped packets so his connection will really suffer if he is dropping data.  NOTE:  Just having a slow connection won't stop you from using Network Connect or accessing the IVE, it will just be slow.  This is likely a combination of factors that is causing the user to not connect properly.  You may also wish to tweak the user's MTU to a smaller value if possible.  Finally you may wish to visit a forum on Satellite internet as they may have pertinent information on VPN connections over SAT. Thanks, Luke Luke Skywalker Sr. Jedi Knight ... View more