Hi, did you ever get to the bottom of this issue, I would be interested to know, ... View more

Gaurav, I am sorry not to reply sooner to your email. If this issue is still ongoing, please raise a case with JTAC and supply the logs mentioned. ... View more

Speaking candidly, I believe with all highly complex software you can expect bugs. The QA process at Juniper is extremely thorough, but realistically - no highly complex software can be expected to be 100% bug free, a software company that says their software is 100% stable are being na•ve or dishonest. That said, any risk can be mitigated with adequate lab testing and a well thought-out implementation plan. Juniper can assist you with this and any other point of your network development life-cycle. ... View more

Any major issues with software would result in that software being removed from the support site. In almost all circumstances the advice from Juniper will be the same, install the latest available software from the support site. In your case 6.4R2. For your information, Juniper can also assist you with an advanced service option where an engineer will work closely with you to understand your requirements and provide a detailed software upgrade recommendation. I hope this helps. ... View more

Can you shed some light specific circumstances that have triggered this error, as it can be fired by a variety of different client issues. Do your clients run any kind of client side firewall or anti-virus/spyware? The troubleshooting guide defines nc.windows.app.23712 as being triggered when the client is disconnected from the secure gateway because of a failure in the clientÕs configuration. It is possible a network adapter or other piece of hardware failed. The recommended action is to click "Yes" to re-establish your connection to the secure gateway. Click "No" to close the etwork Connect client. If you are still having trouble, contact your system administrator and verify your computerÕs system configuration before signing in to the secure gateway and launching Network Connect again. You can also try uninstalling and reinstalling Network Connect. I would recommend contacting your system administrator, assuming this is not you :), and monitoring the IVE logs while you attempt to connect. ... View more

Hi there, The Network Connect error message: 23791 specifically means that the secure gateway denied the connection request from this client. As it appears that the secure gateway is denying your connection, please contact your system administrator (assuming that is not you) and he/she will trace your connection attempt in the logs which may shed more light on the reason for your rejection. ... View more

Glad to help. Just to keep the information fresh - ESAP 1.4.3 is now publically available on the support site here - http://www.juniper.net/techpubs/software/ive/esap/ It was released on November 23rd 2008. Message Edited by ChristopherHowarth on 11-26-2008 01:16 AM ... View more

I believe I remember reading something about this message. If memory serves, the suggestion being that this was simply a misleading error. It may be that it is actually a problem resolving the hostname of the Terminal Services server. Perhaps this one user is having some DNS issues? ... View more

Ruud, I know for a fact that Bitdefender Internet Security 2009 is supported in ESAP 1.4.3 and above. I notice on the support site that the latest available version is ESAP 1.4.2. I saw an announcement internally that 1.4.3 is now publically live, I think there may have been a disconnect which has prevented the support site from being updated with the correct links. Let me look into that for you and get back to you within the hour. ... View more

Hi there Magraw, I am not sure what version of IVE software you are running, but I am willing to bet the errors were related to writing to the HKLM section of the local registry? I have seen similar issues before, which were resolved by connecting using the MAPI protocol. I am having to make a lot of assumptions here in respect to your network. Can you shed some light on your exhange setup, the text of the error messages and the IVE software version? I am sure we can get to the bottom of this, many thanks, ... View more

Great to hear Jeffrey, Bruccoo - how did you get on, any issues? ... View more

It is a strange one, I would hazard a guess at some network issue between the client and server. I am not aware of any issue with the IVE that has these symptoms. ... View more

@neo1x wrote: SO if we upgrade to version 6.3, JIS upgrade to version 6.3 too ? This is an excellent question. Firstly, I can say with some authority that while investigating a similar issue for another customer we found that older versions of JIS will upgrade later versions of NC, WSAM, etc without any problem. So there shouldn't be any requirement to upgrade the JIS at all. Secondly, and more importantly, after version 6 the JIS code was designed to upgrade automatically. So I am a little confused why you encountered this issue if you have JIS on your end point clients. It seems you did everything perfectly! I suppose the next logical step is to contact JTAC and they can look at the setup in more detail. Message Edited by ChristopherHowarth on 10-30-2008 10:08 AM ... View more

Hello David - the IVE is not backward compatible in respect to the Network Connect clients. If the IVE is upgraded, the Network Connect clients need to be upgraded to the corresponding version. If the client computer user does not have administrator permissions on their computer then the recommended solution would be to use the JIS "Juniper Installer Service". The JIS feature is aimed at removing the Admin requirement for installing/upgrading the IVEÕs Win32 client-side components. The only problem is that you need to have admin permissions in order to install this in the first place. Ideally the JIS component would be in place prior to an upgrade. If getting administrator access on these devices and upgrading the NC or installing JIS is not possible then the only obvious course of action is to roll back to 6.1 and rethink how you handle these clients. Hope this helps, ... View more

Tell me more about the 3rd failing server. How does this bookmark differ from the 2 working ones? ... View more

I am sorry, this is not currently possible. ... View more

I do not believe there are any plans to implement such a feature within secure meeting. But our development teams are always interested in this kind of feedback. I would suggest you contact your account manager and raise this as an enhancement request. ... View more

You can't get secure meeting working with Dual Screens and I see no enhancement request raised in relation to this. If you want to have a software enhancement request raised then drop a note to your Juniper account manager with the details and I am sure the development team will be happy to review your requirements. ... View more

Are you using the Installer Service (JIS), if not, is there a possibility that these clients have local permission problems? ... View more

Kaj, I am aware of 2 cases where customer have experienced performance issues with Microsoft CRM. Both cases had the same method of resolution. I will include it here for your information, however, I believe your case warrants further investigation by JTAC if you are able to do so. In the previous cases it was established that the Microsoft CRM application has an active x component with lots of htc files. The IVE injects danaprelude code into these HTC files, the volume of this injection work is causing a performance degradation. In previous cases the issues was resolved by add a selective rewrite policy with the action "Rewrite as Javascript" for the following resource: http://<server>:*/*.htc (where <server> is the fully qualified domain name of the backend web server) Please let me know if this was helpful or if you have any further questions. Message Edited by ChristopherHowarth on 10-07-2008 07:17 AM ... View more

A very similar issue to the one you describe was reported in 6.0, but was resolved with the fix included from 6.0R3 onwards. I have found no indication of any reported issues like this in your later version. I would strongly suggest you raise a case with JTAC if you are able. ... View more

There is a bug in your version of software with the symptom you have described. From reading through the bug notes I can advise you how it was resolved in the previously reported case. In the previous case the issue was related to the auto-select NCP option being disabled. To resolve the problem the customer simply enabled this option System > Configuration > NCP This fix may also apply to your network. For your information this issue has been resolved in later software releases. Hope this helps. ... View more

Just to be clear. Unless you have Desktop Persistence enabled under your SVW endpoint security policy, local HD files SHOULD be deleted at the end of a session, however, you seem to have found an inconsistency in respect to USB devices. The SVW policy allows you to control if access to removable drives is allowed or not. I always took that to mean that if you allow access to a removable USB drive then you accept that data could be transported away from the SVW session, this is the risk you take. I went away and did a set of tests with SVW desktop persistence disabled (SA IVE OS 6.0): Test 1: USB devices plugged in BEFORE SVW session started. SVW session initiated. File created in notepad and saved to 4 different devices: 1) Local C HD NTFS 2) USB HD fat32 3) USB stick fat 4) USB stick fat32. Exited session back to real desktop and checked where I saved the files: Results: Local C HD: - NTFS - File deleted USB HD: FAT32 - File deleted USB Stick: FAT - File NOT deleted USB Stick: FAT32 - File NOT deleted So it seems that my USB HD is treated like a local hard drive rather than a removable device. NOTE: This is further reinforced when I enabled desktop persistence and tried the test again with the file "appearing" to be on the USB HD between sessions, it seems the USB Hard drive is getting virtualised and not being treated as a removable device. Clearly there is an inconsistency in the way a USB stick drive is treated compared to a USB Hard drives. Both are removable USB drives so I would expect them to be handled in the same manner. What I don't know is which behaviour is correct. Should files on USB removable devices be destroyed or, as I suspect, should they remain on the removable device after the session ends? I will do a little more research internally and try to get you a more clear answer. Message Edited by ChristopherHowarth on 07-31-2008 06:31 AM ... View more

This is not a specific problem I am aware of. How long do the spikes last? To what level? Is there an impact to service? What device(s) do you have installed with what features? ... View more

@Brian wrote: Is *iPhone* with smartphone HTML Advanced sufficient in System>Configuration>Client Types or is the string and HTML type different? Hello Brian, Yes *iPhone* will capture the various different user-agents out there for the iPhone. "SmartPhone HTML Advanced" will be sufficent also I believe. Message Edited by ChristopherHowarth on 07-16-2008 07:39 AM ... View more

@jamoi wrote: Personally I thought that IVE OS 6.2 supported clientless activesync, which would be good for the iPhone 3G that has just come out... Yes you are correct, in fact there is a great video here - http://www.youtube.com/user/SSLG33K Message Edited by ChristopherHowarth on 07-16-2008 07:29 AM ... View more

Additionally, It is also worth noting that the iPhone has traditional PPTP and L2TP VPN options. So connecting to, for example, a Juniper firewall would be straight-forward. ... View more

Functions such as core access and email proxy will work with an IPhone, however, (at the time of writing) client components such as JSAM and Network Connect are not yet available for the iPhone. I hope that answers your question. ... View more