Does anyone know why the Pulse clients are listed as vulnerable and what the vulnerability actually entails?  Are they only listed because they were built with a vulnerable version of OpenSSL?  What would an attack on a client actually look like or be able to compromise? ... View more

Yes, things work fine when we use a 64-bit browser like Safari to log in first. ... View more

JTAC is saying that Mac OS X 10.8 and Java 7 are not officially supported on 7.1 code.  If I upgrade to 7.2 (and first replace my SA6000s with MAGs or SA6500s), then they will help me analyze the problem. ... View more

I've also opened BugID 12524365 with Apple.  Not that I think it will do much good - they'll say the problem is with Oracle's plugin...... ... View more

I've got case 2012-1017-1111 open with JTAC.  I'm not hugely optimistic about a quick fix, especially since we had to wait for Apple last time, and given Apple's desire to divest itself with Java updates, it's anyone's guess as to when a fix might be coming...... ... View more

Nope, I've got the same experience here.  This is not cool. ... View more

We ended up re-enabling Host Checker this morning.  All looks good! ... View more

Next question - how can I set that AUTOLDM parameter as the default on all of my RDP bookmarks?  :) ... View more

Excellent. I see the KB article has been updated as well. Hopefully we can put this behind us in short order! ... View more

So I finally got around to doing some more testing on this. I set up another realm on my IVE (7.1R4) and enabled Host Checker on it. I was able to duplicate the same crashing problem if I logged in using the Network Connect client directly after I upgraded to Java 1.6.0_31. Then, however, I applied the latest update that just came out a week or so ago (1.6.0_33), and now the problem appears to have been fixed. Can anyone duplicate/confirm? ... View more

Anyone know if the Java Update (1.6.0_31) that came out yesterday fixes this issue? ... View more

We disabled Host Checker to get around this issue. ... View more

We were told that the root cause is a bug in Apple's Java and that Juniper can't work around it. We were advised to file a bug report with Apple, which we did (10536805). Next step for us is to disable Host Checker on Saturday. Since Apple is involved, there's no way to tell when we'll see an update. Especially when it comes to Java. ... View more

Thanks! JTAC told me that my case has been escalated. Good luck with the resolution, and if there's anything else we can provide, let us know! ... View more

There still is an occasional failure when launching Network Connect from the web proxy start page using Safari. Hard to reproduce reliably though. Looks like the crash with Firefox is universal when using any web page in Firefox that uses Java. So that piece isn't Juniper's problem. ... View more

Yes, we are using Host Checker for all users. Well, not all users have anything done with the Host Checker results, but since everyone is in the same realm, they all have to run Host Checker. ... View more

Our users were by default using 64-bit Java, but I tried 32-bit with no change on my machine. I've uploaded all the standard Tier 1 log requests to the JTAC case as well. ... View more

With handing out IPs via DHCP, how can you give a separate pool of IPs to each role? ... View more

How'd you deal with assigning IP addresses to clients? Seems to me that if you stretch your Layer 2 VLANs for the interface pairs on the concentrators themselves, you need to do the exact same thing with all of your Network Connect pools as well. ... View more

I've opened case 2011-1116-0448 with JTAC. Our failure modes are as follows: 1.) Directly launching the Network Connect client results in a crash after login 2.) Firefox users seem to be able to launch Network Connect from the SSL VPN web proxy start page, but then Firefox itself crashes. Some users are also saying that Network Connect doesn't even launch completely. 3.) Safari users seem to generally be able to launch Network Connect from the SSL VPN web proxy start page, but others are also reporting a failure there. Restoring the following files/directories from backup will fix things: /Applications/Utilities/Java Preferences.app /Library/Java /System/Library/CoreServices/Jar Launcher.app /System/Library/CoreServices/Java Web Start.app /System/Library/CoreServices/JavaVersion.plist /System/Library/Frameworks/JavaFrameEmbedding.framework /System/Library/Frameworks/JavaVM.framework /System/Library/Java /System/Library/LaunchAgents/com.apple.java.updateSharing.plist /System/Library/PrivateFrameworks/JavaApplicationLauncher.framework /System/Library/PrivateFrameworks/JavaLaunching.framework ... View more

I've got 7.1R4.1 on an SA6000 cluster, and I've got a couple Mac OS X 10.6.x users reporting this problem after updating Java. Haven't fully characterized the issue yet though. ... View more

JTAC told me that they're putting in new logic to check the JVM version and use the appropriate password in 6.5R3 and 6.4R5. ... View more

http://kb.pulsesecure.net/index?page=content&id=kb16134&smlogin=true has the known bug on this. ... View more

Network Connect will also work. With JSAM, you don't even have to remember to connect to localhost if you have the host file altering option set. We've also altered the rdesktop Java applet so that people don't have to have a standalone RDP application installed. If you use the standard rdesktop Java applet, it will try to launch the native RDP app on Mac OS X. ... View more

Same problem seen with release version of FF 3.   ... View more