- Pulse Secure Community
- :
- About DanSmart_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
DanSmart_
Contributor
66
Posts
0
Kudos
2
Solutions
10-21-2014
08:35:AM
My #1 request for the new company is to implement something like uservoice.com to garner and track product enhancement requests. It wouldn't take much to fix the little functionality problems that drive me crazy. 1. Customizable java install page to help users through the quagmire that is Java. 2. Allow pushing a Java Deployment Rule file to users BEFORE trying to load hostcheck . 3. Have a supported / unsupported client check that determines if hostcheck and other feature will run without me having to write complex browser UA string rules. The SA already records this in the Active User list. Why must browser tags be the only way to determine client types? 4. Allow Junos Pulse Collaboration for iPad to use a MyMeeting name for the meeting ID. 5. Allow HTML in the Pre and Post authentication popups (so we can add <a> tags and format page) 6. Have an option in Citrix resource policy for "VPN" that doesn't automatically set role options upon save. ...
... View more
05-08-2013
10:57:AM
I guess I should have been more clear here. ChromeOS DOES NOT allow root access, so you can't load anything. I found NO WAY to install Network Connect on ChromeOS, even in developer mode. Unless you know otherwise, it is 100% broken. My comment was that there is a good Network Connect fix FOR ALL OTHER LINUXES. ChromeOS is more like Android OS than its like Linux, yet can't run Android Apps.
... View more
05-06-2013
09:02:AM
Bottom line is that there is no Java on Chromebooks, so you can't launch the Network Connect Java client. Just doesn't work. Would be nice if there was a Pulse client for Linux, but I'm using Paul Smith's Mad-scientist script which makes it run like the Pulse client. http://mad-scientist.net/juniper.html
... View more
02-20-2013
09:27:AM
I was just handed a Chromebook to make work on the network. I see that there is no Pulse Client, and I can't see how to add Network Connect to the OS. Any options for this? -=Dan=-
... View more
05-23-2011
02:48:PM
No, this box is standalone. Just doesn't give a hostname in syslog.. Just IVE. Also, doesn't give hostname on the top of the status page. So what you are saying is that this is a feature of clustering? Can we create a single member cluster? Or just don't worry about it.
... View more
05-23-2011
09:18:AM
Though there is a hostname listed under Overview, it the box gives a hostname of IVE in the syslogs. Is there some other way to set the hostname? My other cluster works correctly and I see each member with the proper hostname.and it puts the hostname in the logs. Thanks
... View more
02-15-2011
11:18:AM
Why not just browse to your SA box without Pulse. Pulse is just a browser that can run virus scans in the Android form.
... View more
02-15-2011
11:15:AM
No one seems able to help, but our next test will be to run a NAT on the firewall from Untrust to the DMZ zone that our SA is in. We will port translate 636T to 443T. On the backside of the Auth-only port, we will specify the 636 port in the URL.
... View more
02-15-2011
11:12:AM
We have found the plug in to be a little flakey. It seems to work intermittently. Normally works the first time, but then is inconsistent if hitting the Secure Meeting button will bring up the meeting form.
... View more
02-02-2011
11:02:AM
Kevin, PMJI, but I was wondering if it was possible to alter the meeting setup screen the way you can login screens? We use LDAP for users auth, and to use this to add users to a meeting you have to press the search direcotry button which brings up a popup window. It has two tabs. The Local tab is default, so you have to press the LDAP tab before you can search for a user. That my main problem with SM. Users always asks why searching for users is broken. Its not broken, just hidden under several clicks. And the search on the main screen is only for local user accounts, which is what they always try. Other than that, works like a champ on Windows, MacOSx, and Ubuntu. (need Java Runtime Env installed) -=Dan=-
... View more
02-02-2011
10:54:AM
Is it possible to use the Authoriztion only Access feature to reverse proxy LDAP over SSL. It seems simple on the inside to point the url to https:hostname:636, but will the external interface of the Auth only listen for something trying to connect on port 636? -=Dan=-
... View more
01-26-2011
11:55:AM
Looks really good to me. Nice to get recent jnet messages on the page.
... View more
01-26-2011
07:46:AM
I'm trying to reverse proxy LDAP over SSL which uses port 636. Can I setup this like activesync, but specify port 636? Will that work or is there another way?
... View more
03-18-2010
11:32:AM
I was using DHCP with NC, and I got duplicate IPs causing a similar problem. I switched to an IP pool to stop that. Not sure if that affects you, but it exhibits the same symptoms.
... View more
01-04-2010
05:28:PM
I can't help on this issue, but just want to add that Websense 7 has been the bane of my existance. With their acquisition of Surfcontrol, the have a strangle hold on the filtering market. Their filter wouldn't be nearly as bad if they just had a few decent troubleshooting tools. There commandline debug tool works, but come on. Can't they come up with a way to turn on logging of their components? I still don't have the DC agent working right after a year of trying. Debugging is nearly impossible. I bought some licenses for the remote filtering, but my success with their main product stopped me from even trying it. -=Dan=-
... View more
11-13-2009
07:17:AM
I just saw this thread and I'd like to participate. Missed the first conf call. Did anyone take minutes? -=Dan=- Dan Smart Vulcan Materials Company Birmingham, AL
... View more
09-11-2009
06:49:AM
I've been testing the new Citrix Profile templates. So far in testing the WI 5.1 template is working with both Mac Safari and Mac Firefox with Xen Desktop 5.1. I'm going to try to test Citrix client delivery. Not sure if it works with Mac or not. One issue that has always occurred. We use Network Connect with a ACL that limits it to the ICA ports instead of JSAM since is seems more robust. For Xen Desktop role, we point the "Home Page" to the Citrix Xen Desktop web server to start this immediately. However, the home page tries to load before the NC client is finished connecting, giving some error messages while trying to connect to Xen, and requiring you to click a link to manually connect to Xen. It works but is not seamless. There should be an option for the Home Page to wait until NC connects. Finally, after NC connects on the Mac, the window stays open on top the the browser window. You have to hit the "-" button to minimize it. I'd sure like NC to automatically minimize after connecting the way it does in Windows. -- Next... Testing full VPN NC on Mac using user certificates, and Windows Xen 5.1 testing, and Citrix WI 4.6 testing under windows. -=Dan=-
... View more
09-03-2009
01:52:PM
On iPhone Go to Settings/Mail,Contacts,Calendars Accouts--> Add Account Exchange Activesync external hostname of activesync virtual port (async.company.com) emailname@company.com ADdomain\username ADpassword
... View more
09-03-2009
01:51:PM
On IVE 6.5R1 1. Create a new role ("iphone") a. Check Web / Options Under advanced: allow untrusted ssl websites set http timeout - mine is 240. 2. Create a new resource policy a. Add new Web policy of type Custom 1. Add Base url to exchange activesync http://hostname.domain.com (or https) 2. Check that Web ACL AutoPolicy is created. b. Hit roles tab and add "iphone" role created in step 1. 3. Create a new sign-in policy a. Add new URL to the external Activesync URL b. Click Authorization Only Access button 1. Virtual hostname is the outside hostname 2. Backend url to exchange activesync http://hostname.domain.com:80/ (or https/443) 3. Auth Server is "No Authorization" 4. Role --> role from step 1 5. Check Allow ActiveSync Traffic Only 4. Optional - Create a new virtual host ip for activesync This allows you to add a proper certificate for the domain name that activesync will be using. a. Add new external virtual host under networks. b. Create in install new device cert 1. Click the name of the new cert to assign to the virtual host.
... View more
09-03-2009
01:06:PM
I loaded it to test the Exchange Activesync "Authorize Only" access. This works great, and does header checking so that only Activesync traffic comes through. I'm testing XenApp 5.0 and 5.1 next.
... View more
09-03-2009
12:59:PM
I tried, but never got this to work. Ended up with using user certs. I'd love for someone to have the "magic dust" to make this work.
... View more
06-08-2009
10:24:AM
There is a major change in Hostchecker in version 6.3. Now you must specify signatures by "versions" rather than days. Because of this change, I could no longer use the viruschecker, since the maximum versions was 10, and that's way to short for my users. -=Dan=-
... View more
06-01-2009
01:46:PM
We use a combination of Citrix Web Interface 4.6 for published Apps, and Citrix XenDesktop Web Interface 5.1 for Xen Desktops. Both servers want to query a user's desktop to determine if a client install is needed. The Juniper SA want's to download a client as well. I can't ask the Citrix folks to turn off client detection, since this would break local users from getting updated. How do people handle the issue of client deployment? Note: When I was running 6.0 IVE I had to add some cookies to make WI 4.6 work. I see in 6.3 IVE, there is a config for WI 4.6. Does this make these cookie settings automatically? Is it safe to change the resource from WI 4.5 to 4.6, or should I build a whole new resource? -=Dan=-
... View more
05-15-2009
09:47:PM
When running LDAP, you have to add AD groups to the "Groups Catalog" In Role Mapping, Groups, Add a group. In the catalog screen, you need to do a search, and find the group you want, then add it to the Catalog. If you set your nesting parameter in the LDAP authentication, it will expand any nested groups automatically.
... View more
04-20-2009
09:28:PM
Ooh, I missed the perform check every xx minutes. I had this at zero. What's a reasonable value for this (assuming that I had it set to zero before). How does this influence the remediation process. Also, this updates the signature files only... No engine updates? McAfee has something they call a SuperDAT that does both. -=Dan=-
... View more
04-20-2009
07:38:AM
Biggest HostCheck AV issue is that the new Opswat checker wants a newer McAfee virus scan engine. Users with an older engine are failing, and the upgrade requires a SuperDat engine upgraded instead of a regular dat install. I think I'll need a "custom" remediation mechanism for this. -
... View more
04-19-2009
09:12:PM
John, I'm assuming that you are importing only your 6.3 boxes to NSM. Have you tried pushing an update to them?
... View more
04-19-2009
09:09:PM
I just did an upgrade of a 4000 cluster from 6.0r8 to 6.3r4 yesterday. Upgrade went smooth. Had to update the AV hostcheck (see my other post on subject). I learned the hard way that upgrading users Network Connect is problematic, so I pushed the ne NC via SMS ahead of time, and I check the " Restrict access to Admins only" setting in Signing In tab. 6.3r4 gives me an option for Citrix Web Interface 4.6. I put in the custom cookie headers described in the IVE How To Citrix doc that works with 6.0. I need to test the 4.6 option to make sure nothing breaks. Only mistake was that I was upgrading the IVE over a NC tunnel, and when I check the restrict access, my NC session when down. Oops. I was doing the upgrade from a machine I was RDP'ing to, but lost connection before I could kick off the upgrade process. Next time I will need to VPN to a firewall first, then kick it off!
... View more
04-19-2009
08:54:PM
I was prepared to fix HostCheck config issues after the upgrade due to the change from Sygate to Opswat for endpoint enforcement. I fixed the Optional: Virus Definition not older than 1 day, and reset to 10. This is much shorter than the old rule, so some users failed the new check even with 10. My question is what else needs to be set for the Auto-Remediation of a supported AV? What I did is: 1. Require Specific Products (Which are supported) 2.Checked Optional: Virus Definition not older than 10 days. 3. Checked Optional: Monitor this rule for change in result. I assumed that #3 must be checked, so that an updated AV would then be reclassified as passing the AV check. Is that what this does? 4. Checked "Download latest virus definition files" At the policy level, I did the following: 5. UNChecked "Enable Custom Instructions" I assumed this was not necessary since virus definition remediation was automatic. 6. Checked "Send Reason Strings" so the user knows there's an issue. Do I need to check #3 and is unchecking #5 OK? This is a tricky thing to test. Wishlist: some kind of host check test mode setting. A/P SA-4000 IVE 6.3.4 SA-4500 IVE 6.3.4 Lab SA-2000 IVE 6.3.4
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
