- Pulse Secure Community
- :
- About TheHorse13_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
TheHorse13_
Contributor
31
Posts
0
Kudos
1
Solution
07-23-2012
04:44:AM
It happens with all hostchecker policies across all defined roles. We are upgrading to a new version of the OS in about a week. I will see if the issue remains after that. No, it does not log the first login failure which leads me to believe that hostchecker is causing the problem. It's a known buggy app and it is our top suspect here.
... View more
07-20-2012
07:09:AM
All browser platforms (that are supported). Yes, we tried the 7.2X OS builds but found them to be complete junk. We promptly uninstalled them.
... View more
07-20-2012
06:34:AM
Ever since we applied ESAP 2.1.8, many users have to attempt sign on two times before getting authenticated to the IVE. They enter the correct password and the system comes back with a failed login. They enter the exact same credentials a second time and authentication is successful. We backed out 2.1.8 but the condition remains. We even updated to 2.1.9 and that too has done nothing. Completely removing the Juniper apps from the host does nothing to solve the issue. We are currently on 7.1R6 but plan to go to 7.1R10 very soon. Has anyone else seen this behavior?
... View more
06-29-2012
03:57:AM
Yes I found what I was looking for in the doc you suggested. I also did what the other user did here and scripted my own uninstaller. I have many instances where Juniper apps hose up and doing the normal uninstall in the control panel does not work. removing everything manually is time consuming and hateful. Thanks again.
... View more
06-27-2012
09:08:AM
Thank you.
... View more
06-27-2012
05:20:AM
In recent months, we've had to resort to reimaging hosts more frequently in order to resolve client side Juniper VPN issues. Given that this isn't very efficient, is there a tool out there that will strip Windows7 hosts of all traces of Juniper applet installs (files, folders, reg keys)? If not, is there a doc which shows where all of the applets, folders and regs keys are installed? Simply doing an uninstall from the control panel is not what we're after. We're running the 7.1x SSL VPN operating system. Thanks.
... View more
06-26-2012
04:57:AM
We saw a ton of issues when regression testing the 7.2R2 build, including hostchecker breaking. We determined that the 7.2R2 build is junk. Install the 7.1R10 build and you'll be much happier.
... View more
06-11-2012
04:26:AM
I'm waiting for 7.1 R10 which is due out later this month. The 7.2 builds are junk. I have no idea why they would bother to post them as GA releases.
... View more
06-06-2012
06:18:AM
If you're not happy with 7.2R1.1 then don't bother downloading 7.2R2. It has the same issues with hostchecker. It failed our regression testing on the second item. Hostchecker goes into a loop and never stops. It's pretty awesome. This started after we used the VPN to change the password on the user account.
... View more
06-04-2012
04:14:AM
I've reported the issue not only to our SEs but also to Juniper management. How is it that no one was informed? The last several builds of the SSL VPN OSes have been released with critical bugs in them. Sounds like there are more issues other than poor builds getting out the door.
... View more
05-28-2012
07:26:AM
The standard logs that we send over to a syslog server do not show useragent. The most we receive is that the user belongs to the mobile user realm, which is not helpful in this case. My specific question to Juniper is if they log the actual useragent string anywhere or is there a way to enable this for logging purposes? We want to parse out the different types of mobile devices that are being used by our users. Thanks.
... View more
05-25-2012
02:20:PM
We had the exact issues you speak of with 7.2R1. Hostchecker did not work. We immediately rolled back to an earlier build.
... View more
05-24-2012
07:39:AM
We allow mobile users the ability to sign on based on user agent string checks. For example, if someone has an iPad we check that and then know that they are part of the mobile user realm and they are placed in a specific permission group. That said, I cannot find any useful data in the IVE logs that would allow me to see how many iPad users logged into the IVE for the week. Does anyone have a way to produce a metric like this with the IVE logs? It appears that user agent string info is not in the IVE logs by default. Thanks.
... View more
03-05-2012
06:46:AM
Does anyone know when there will be support for Sophos v. 10 in the ESAP updates?
... View more
02-04-2011
07:38:AM
Yesterday at around 2PM EST, all of my users who have Sophos 9.0.5 stopped passing the hostcheck for AV signature compliance. I've looked at the OPSWAT XML file and see nothing out of place. They also say there is no issue on their end. Sophos says the same thing. The Juniper folks I've spoken with say that no one else is reporting this. The issue is isolated to Sophos 9.0.5 only. All other versions are working fine as well as all other supported vendors. We're running OS 7.0R3 with ESAP 1.6.8. No changes were made to the VPN since Jan 20th when ESAP 1.6.8 was applied during normal maintenance. Anyone else seeing this?
... View more
01-10-2011
11:36:AM
Most of the servers do not have UAC running. The issue "seems" to stem from HostChecker not upgrading properly after we went from a 6.x platform to 7.0R3. Is there a Juniper tool out there that removes all traces of Juniper installed components? I'd like to see what happens when we do this on a clean host that has no trace of older Juniper software/ reg keys/ directories. Thanks
... View more
01-06-2011
08:12:AM
What would be nice is a HELP button that can be added to the VPN login page that points to a library of docs on the Juniper site. Topics like RDP use, supported AV checks, and so on would be nice in a "FAQ" section. A feature like this would eliminate the stale old static versions that we have to continuously update and serve up to the users AND we can be sure that the most current documentation is being delivered to the users.
... View more
01-06-2011
08:07:AM
Release notes for R4 deal with NC and DNS search order issues on Windows 7 hosts. Maybe this is your smoking gun.
... View more
01-06-2011
07:58:AM
Has anyone else had this issue with ESAP 1.6.7? All of our Windows2008 server users are failing the hostcheck even though they meet the requirements of the OS check.
... View more
12-15-2010
04:51:AM
I have a number of users who have the Samsung Galaxy. They have intalled the Junos Pulse app and discovered that it will only display global bookmarks assigned at the group level. It will not display bookmarks specific to the user (we use Active Directory for authentication and authorization). Meanwhile, if they acces the SSL VPN using the web browser that comes with Android, they see their shortcuts in addition to the group level global bookmarks. That said, will this be addressed in future builds? When can we expect to see an RDP client for Junos Pulse? Thanks.
... View more
08-16-2010
05:15:AM
Back in the day, we purchased several SA6000FIPS units yet as of today, we cannot generate (from the console) a CSR of more than 1024 bits in length. As you know, we must generate 2048 bit keys now. Is this supported in the 7.X build? If not, when will this feature be added to support the SA6000FIPS units? Thanks.
... View more
05-28-2010
10:34:AM
Yes, we too have the same issue and it was noticed between 3 and 6pm GMT -5:00 (Eastern Standard Time) I called support and they had no idea it was happening. I'm currently escalating to level 3 support. Don't expect a quick fix for this folks. We strongly believe the XML file pushed during that time is broken even though there are no logs that show issues with the XML file or anything else on the IVEs. We cannot get an older one either. We have asked. We suggest calling JTAC and ranting to bring more attention to the problem.
... View more
03-29-2010
11:24:AM
We've just upgraded to the 6.5R3.1 build and we've noticed that quite a few users are being told to contact the administrator and can no longer login to the VPN since the upgrade. Completely removing the Juniper software and deleting the folders does not solve the problem. The ONLY fix we have found is to recreate the user profile in Windows. Anyone else seeing this? Thus far about 20 or so hosts have had this issue.
... View more
06-22-2009
06:52:AM
I'm glad you posted this information. We went to 6.4R1 recently and the stability has been less than stallar. We have a number of odd things happening but NC seems to be one of the few things working right now without an issue.
... View more
06-22-2009
06:48:AM
We recently went from 6.0R3.1 to 6.4R1 and it has been painful to say the least. 1) Syslog output for one of the two IVEs works even though both are configured the exact same. 2) Archiving fails even though all credentials/settings are correct 3) HostChecker interferes with authentication and fails you on the first try 4) Some people have web TS sessions sit in limbo and timeout. (seems DNS calls make it sometimes and other times do not) 5) When a session times out, the login page doesn't appear. Instead, you get the Page Cannot Be Displayed message and the VPN exits in a most ungraceful way. You have to close down your browser and start up again fresh. We're certainly not pleased with the upgrade. We've tried recreating HC rules which worked for a few days but now we're back to having odd failures. I'm hesitant to move to another build and have more odd things happen.
... View more
06-17-2009
08:44:AM
We are using 1.4.9 which re-introduced problems seeing FreeAVG 8.5. Hooray!! We are using Juniper's canned AV checks along with the auto signature update feature when a user has an AV client with an out of date signature. None of this works though. I've seen others post similar complaints starting with the 6.2 build and JTAC confirms that there are, "...a number of issues with hostchecker that they are aware of...". Funny thing is that before I went ahead with this upgrade, I was told that there were no problems at all. That was a week before I pulled the trigger on the upgrade.
... View more
06-16-2009
05:10:AM
We were running 6.0R3.1 for a long time without issue. Ever since we upgraded to 6.4R1, hostchecker has done nothing but odd and inconsistant things, failing users who clearly pass the defined checks, interfere with normal logins (telling users they entered a bad set of credentials on the first try but allows them in on the second). Our only solution thus far is to disable it completely. I've seen others on the boards have the same issue starting in the 6.2 builds and they too had to disable hostchecker. Has anyone found the cause of this behavior and more important, a solution?
... View more
07-30-2008
10:56:AM
For years, we've allowed users to change their AD passwords within the VPN. However, when Active Directory sends out the standard 14 day notification that your password is going to expire, it doesn't pass-thru the VPN to the end user. The account simply locks out and they perceive some sort of problem with the VPN when what really happened is their AD passwords expired. Is there a release that will pass Active Directory notifications down to the VPN client? It would be most helpful for our remote staff, which has grown 200% since the economy tanked. Thanks.
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
