I need to know what a reasonable maximum number of users is for a SA4000. We are currently licensed for 200 and we peak at about 50. A big new project has managers saying we will need to allow up to 3000 concurrent users, but I am guessing that when we analyze the situation realistically it will be more like 500-1000 concurrent users. Your experiences welcome, thanks. (This project is big enough that maybe we can get an upgrade to a SA 6500 out of it! j/k :-) ) ... View more

I have a user who reports that Network Connect runs on her Windows XP machine exactly once each time she installs it. Whether she reboots the computer or not, once the first NC session is terminated, subsequent attempts to run NC do not work. I don't have any diagnostic messages or logs yet. If the user uninstalls and reinstalls Network Connect, it runs one more time. Repeat for each time she wants to use Network Connect. I'm positive I have seen this once before, and I think that it was some arcane Windows issue, but I can't remember any more than that and I can't find old notes. Anyone have any leads? ... View more

I have three Mac OS 10.6 (Snow Leopard) users reporting this issue: Users are all using Network Connect on top of wireless access, and NC is killed in about a minute with the "routing table has been changed" error. One user claims this issue started two weeks ago, but they didn't notify us until today. One user says this issue arose with a brand-new Mac purchased last week. That user reports that Network Connect works with wired access. I'm not finding anything too promising in either Juniper or Apple forums. Our site is running IVE code 6.5R1, and we have been on that release since November 2009 or so. Suggestions welcomed... ... View more

Since adopting Juniper's Network Connect as our SSL VPN offering, we have run in the mode "Split Tunnel with Route Change Monitor." We have had issues with Bonjour Networking (via Ruckus campus music software; iTunes has been OK) and Microsoft's"Wired Autoconfig" setting, but we have been able to work around those. However, there appears to be an inherent and unavoidable conflict between zero-config network products and Network Connect's "Split Tunnel with Route Change Monitor" setting. We have been getting more reports of products conflicting with the route change monitor, and we are staring at the beginning of 802.1x deployment. I forsee that telling our users to stop using zeroconfig stuff will not be an acceptable answer much longer, and telling users not to use 802.1x is not acceptable. So, it appears near-certain that we will have to shut off the Route Change Monitor on split-tunnel in the next few weeks. My question is: how real is the security risk in disabling Route Change Monitor? I really don't like the idea that our users will think traffic back to our central campus is encrypted, when something has mucked with the routing table and maybe there isn't an effective secure tunnel any more. This is a request for "Any thoughts?" rather than a request for a specific solution. ... View more

We have a user who is on the Sprint Mobile network. When he brings up Network Connect (6.0R2), his Sprint Mobile connection is terminated. The early speculation here is that the Sprint Mobile client objects to the changes Network Connect makes to the PC routing table. Anyone seen this with Sprint, or with another mobile card/service? Confirmation would be helpful; also any ideas for remediation. Thanks! ... View more

I'm trying to pick our next upgrade for the IVE firmware. We are currently on 6.0R2. Network Connect is the only feature we use, so stability for loading and launching NC is paramount. I'm unclear on the distinction between the 6.0 train, the 6.1 train and the 6.2 train. (We'd probably avoid 6.3 as Too New, and we don't need the new management features.) I note message #7352 contained a report of a site that backed out of 6.2R2.1 back to a 6.1 version where they had been stable. Suggestions welcomed, thanks! ... View more

I'm almost embarrassed to post this one, but I'm also out of ideas.  It's most likely a Windows bug and I'm not at all good at troubleshooting Windows. Network connect, version 6.0R2. User installs Network Connect.  It runs fine.   User reboots PC.  Network Connect no longer works.  Unfortunately our help desk staff is too clueless to collect the nc.windows.app error number. User uninstalls Network Connect, reinstalls it, and then it works.   Until the next PC reboot. So, after every PC reboot, the user must do a Windows Control Panel uninstall of NC, then reinstall.  What am I missing here?   Thanks for any input...  ... View more

As part of a large public organization, my shop has been charged with ensuring that Juniper's SSL VPN is "accessible" to the handicapped.  I presume  this means mostly the visually handicapped, though I do know we also have users who type slowly with a stylus held in their teeth, for whom login timeouts can be an issue. There is a formal evaluation process for this.   Will the default Juniper login & startup screens pass this review?  If not, are there any tips for creating custom pages which will do the job? We are running IVE code version 6.2R2-1 and the only functionality we use is Network Connect. I'm sure someone in a public organization has been through this issue, he said hopefully... ... View more