About RichPeace_

RichPeace_ · ‎02-26-2009

We are running 6.3R3. I just updated last night, so I am waiting to see how things go from here. The lag our users experience is not a great deal, just a minor annoyance when we get 100+ connections. The major thing we notice is extremely slow response times in the Admin console when we are making changes to the appliance. Occasionally when you click a link in our Admin console, it will take upwards of 10 seconds for the page to refresh and allow you to click another link. Like I said, not a major problem. Just an annoyance.

RichPeace_ · ‎02-26-2009

I have noticed that our SSL-VPN starts to experience slowness issues after a long period of our appliances not being rebooted. We are currently running an SA4000 cluster and have not identified any process for any kind of auto reboot. Typically we only reboot the devices when we do a firmware upgrade. My question is, do any of you have any method to automatically reboot your vpn's and if so, how often and what do you do. I don't know of anything within the appliance's software that enables this functionality, thouh I could be missing it. Thanks in advance to any who can help.

RichPeace_ · ‎09-08-2008

The user actually gets a message stating stating "There is already a connection established sing that IP address"

RichPeace_ · ‎09-08-2008

OK Guys/Gals here is my dilemma.... We have a group that is affiliated with our hospital that will be using our Juniper appliance for remote connectivity. This group has their network setup to broadcast one IP address to the outside world. They are able to connect to our Juniper appliance, but when another person from their site connects...Goodbye to the other connection. What I would like to know is why or how is the IP address of the client used and why does it allow only one connection from that IP. We would like to help this group of users find a way around this issue, but we are stumped thus far. Any thoughts or suggestions would be greatly appreciated. Thanks, Rich Peace

RichPeace_ · ‎06-16-2008

Jahmal, thanks for you input. Your solution is actually the path we decided to take. We do have two seperate realms, however we do not want to assume users will never find out about the /mac realm. It would not be a big deal for either mac users or windows users to log into both realms provided they meet the security requirements. It just seems like it would be sloppy if we created two realms and then just let everyone log into them. I say the role mapping is different because it is. One user who logs into the Mac realm we have created will get mapped to different groups and policies than they would if they logged into our normal users realm. We allow Macs onto our Device because we have a lot of users who have Macs that want to connect, however we do not do any mapping of network drives for them because they are not required to have any anti-virus software installed. Thanks for the ideas and help from everyone.

RichPeace_ · ‎06-12-2008

Recently we created a realm on our Juniper appliances to allow access for Mac OS X users. This decision was made after several Mac users made the request. Now that we have created our realm we are running into a few concerns. We require that windows users who connect to our system have Antivirus running and up to date on thier machines, however we have decided we will not enforce this same policy for Mac users. With that being said, we would like to create a host check policy to keep our users with Windows machines off the Mac realm. The role mapping is completely different in the Mac realm and we feel this will only cause confusion. I was told by a Juniper support member to just creat a policy that denies access to all computers that have explorer.exe running. However, after creating this policy it did keep Windows users out...but it kept Mac users out as well. If anyone has any suggestions I would greatly appreciate them. Thanks in advance, Rich Peace

Re: Auto Reboot

Auto Reboot

Re: Single IP Address broadcast

Single IP Address broadcast

Re: Host Checker

Host Checker