- Pulse Secure Community
- :
- About Chudel_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Chudel_
Contributor
22
Posts
0
Kudos
0
Solutions
01-25-2012
04:46:AM
I guess this is the "best available" accepted solution. I should submit an enhancement request to: - integrate RADUS with pass-through proxy if possible - autolaunch a bookmark on signin (such as you can autolaunch network connect)
... View more
01-21-2012
09:41:AM
Hello, I have Two Factor authentication on the Juniper working fine and want to use it to protect a web resource on the intranet however a certain subset of users will only ever use the single web resource -- how can I autolaunch a bookmark upon login? Alternatively, I could use Virtual Hostname but that does not seem to provide an opportunity to perform any (let alone a second) authentication. Thoughts? Thanks,
... View more
09-14-2010
09:48:AM
Hi, We are starting to see some users on our IVE (6.5) be unable to launch network connect. Is anyone else seeing a rise in problems or have any ideas how to diagnose the problem? The application event log is showing: Faulting application dsNcService.exe, version 6.5.0.14599, faulting module dsNcService.exe, version 6.5.0.14599, fault address 0x00025a3f. Thanks,
... View more
10-28-2009
07:30:AM
Can you confirm this is a supported solution? I was led to believe (it's been a few years...) that geographically disperse active/active clusters would not perform well, so we run two standalone systems with global server load balancing (based on time-to-closest-server).. But I would love to run a cluster because it would make administration so much easier. Cheers,
... View more
10-28-2009
07:11:AM
@kenlars wrote: Is the connection between the PC and the SA proxied? What are the proxy settings in the role? What are the proxy settings in the client before it connects? Have you looked at debuglog.log (I know it is usually extremely obscure, but you might get lucky if you check for messages around the time it disconnected). Ken The connection between the PC and the SA is not proxied. I will go through the debuglog.log, thanks for that tip.
... View more
10-27-2009
06:46:PM
I cleared any and all SAM references, AND rebooted (which I almost never do) - problem persists. (Crappy IVE software QA...) I will open a JTAC.
... View more
10-27-2009
12:35:PM
Thanks - looks right to me. Can you tell me how this may have suddenly been enabled? I have been through the config and saw one instance of JSAM set (but no SAM sessions enabled for the role anyway...) so we'll see if that changes anything. How can I be sure to disable JSAM in these (or all - we don't use it) circumstances? Thanks,
... View more
10-27-2009
07:43:AM
Hi, We had to upgrade the IVE to 6.5R1 to support Snow Leopard users and now are seeing frequent NC disconnects (every 20-26 minutes) with many Windows NC users. Is anyone else seeing this? I am NOT seeing any host-checker timeouts or other errors on the IVE logs, just that the connection closes: Info JAV20023 2009-10-27 10:11:16 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Closed connection to TUN-VPN port 443 after 1230 seconds, with 333643 bytes read (in 1024 chunks) and 373740 bytes written (in 1153 chunks) Info JAV20021 2009-10-27 10:11:16 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Connected to TUN-VPN port 443 Info NWC23464 2009-10-27 10:11:16 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Network Connect: Session started for user with IP aa.bb.cc.112, hostname Lastname-pc Info NWC24328 2009-10-27 09:52:22 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Transport mode failed over to SSL for user with NCIP aa.bb.cc.112 Info NWC23508 2009-10-27 09:51:52 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Key Exchange number 1 occured for user with NCIP aa.bb.cc.112 Info JAV20021 2009-10-27 09:50:45 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Connected to TUN-VPN port 443 Info NWC23464 2009-10-27 09:50:45 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Network Connect: Session started for user with IP aa.bb.cc.112, hostname Lastname-pc Info NWC23465 2009-10-27 09:50:06 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Network Connect: Session ended for user with IP aa.bb.cc.112 Info JAV20023 2009-10-27 09:50:06 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Closed connection to TUN-VPN port 443 after 740 seconds, with 425730 bytes read (in 991 chunks) and 322507 bytes written (in 1077 chunks) Info NWC24328 2009-10-27 09:39:21 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Transport mode failed over to SSL for user with NCIP aa.bb.cc.112 Info NWC23508 2009-10-27 09:38:51 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Key Exchange number 1 occured for user with NCIP aa.bb.cc.112 Info JAV20021 2009-10-27 09:37:46 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Connected to TUN-VPN port 443 Info NWC23464 2009-10-27 09:37:46 - ive - [xx.yy.zz.53] First.Lastname(Passwords Only)[Corporate Laptop, Shared Drives, Users] - Network Connect: Session started for user with IP aa.bb.cc.112, hostname Lastname-pc Thoughts?
... View more
09-03-2009
10:35:AM
Hello, We use 802.1x authentication and on our macintosh computers, the machine certificate is stored in the "System" KeyChain. Is there a way for the host-checker to detect this? I've tried and so far have had no luck in integrating machine certificate checks into OS/X. Please advise. Thanks!
... View more
01-15-2009
11:48:AM
Is Norton AV 2009 finally fixed too?
... View more
01-15-2009
11:45:AM
Where/how do you get 1.4.5? I only see 1.4.4. available still.
... View more
12-23-2008
06:11:AM
I found the answer so I hope it helps anybody else. There is a bug in the AV check that OPSWAT provides to Juniper OR there is a bug in how Trend is updating 64-bit machines (or it's just us...) Here is the problem: the AntiVirus checker is searching the registry for TrendAV information and if it finds this key on a 64bit machine: HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion It will stop searching and error out. The problem is that on 64-bit machines, the keys are really in HKLM\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion The AV check knows how to find this 64-bit location but it errors out if the previous key already exists. (ie: On first failure, it boots out). What I think is happening is that some Trend update is stuffing a blank registry entry in the 32-bit locationÓ and that is hosing up the OPSWAT AV checker. (Which should hose it up for all OPSWAT users, not just Juniper). I was able to successfully delete HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion Along with its subkey (Misc.) and the AVCheck now passes. (more research - it looks like only the Misc. key needs to be deleted). These are blank keys anyway, and I've noticed no other problems. Now, some keywords for google: Trend OfficeScan problem 64-bit Juniper OPSWAT host checker
... View more
12-11-2008
06:03:PM
I was in the same boat - worked great for several months. Now the latest Trend update (at least for 64-bit W2k8) is crapping out and I can't get past the HostChecker. Any ideas? Juniper won't support because it's not an approved platform. I think that Trend may actually have broken something because the OEISDIAGNOSE produces the following. (Attached "good" and "bad" AV oesidiagnose outputs). Any help from the forums?
... View more
11-25-2008
07:09:PM
This is just horrible. I needed to upgrade to ESAP 1.4.3 because Total Protection and Norton360 AV fixes/support were finally there, but now AVG (free) is broken - AGAIN. I have some users loading 3 AV products on their system just so they can try and login (which I'm sure breaks all sorts of other stuff). I don't know how hard it can be to at least provide some actual detailed information into what is going into these ESAP releases. Calling in for support where the debuglog.log is insufficient and I have to get an already irate user to "bring in your laptop" (nevermind desktops) so we can have hit/miss support times is just so frustrating. Running 6.3R1-2. ESAP 1.4.2. Is it just me or has this product support really deteriorated in the past year?
... View more
08-27-2008
12:51:PM
I have two users with this problem (most don't use AVG). One of the users was able to get the problem to go away by applying the following Windows hotfix, Windows6.0-KB929547-v2-x86.msu. Can you tell me how you get the reason string to display? I have a customized reason string with help for users but never do I see the actual reason the VPN thinks it is failing, ie: "AVG ... does not comply with policy"
... View more
08-13-2008
03:07:PM
This was a great idea. I took it and expanded a bit by looking at the URL that gets called when a user is forced to change their password. I have successfully created the following web bookmark: https://[FQDN]/dana-na/auth/url_default/welcome.cgi?p=passwordChange&username=<USER>&authserver=[NAME-F-YOUR-Auth-Server]&realmId=6&type=2 Be sure to HTMLEncode the name of your Auth Server. So if it is something like "CORP LDAP", it should be encoded to be "CORP%20LDAP"
... View more
07-07-2008
11:12:AM
Answering my own question - problem is not with Juniper. I did a network capture and the decrypted Raidus password is correct.
... View more
07-07-2008
10:33:AM
Along these lines, is there a 'cheat sheet' yet to perform Single SignOn to OWA 2007? The older cheat sheet was very helpful.
... View more
07-07-2008
10:22:AM
Forgot to mention: Model: SA-4000 Current version: 6.0R2 (build 12141)
... View more
07-07-2008
10:18:AM
Hello, Several users are reporting that after updating their Norton 360, they are no longer able to connect to the VPN, citing the Host Checker as the reason. Norton 360 (v2.x) is in the supported list of AntiVirus vendors. The specific Norton 360 version information is in the attached picture. What gives?
... View more
07-07-2008
10:04:AM
Hello, I am seeing some odd behavior with the Additional Authentication Server configuration for a user realm. I have the USER and PASSWORD set to predefined (the backend is a radius server that double-checks the username/password supplied and then makes an outbound phone call for out-of-band authentication). When user passwords contain non-US characters such as "£" -- the authentication fails. Is this key seqeunce being escaped by the Juniper SA? Thanks,
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
