Everyone,   I am running code 7.0R4 on our SA6500 gateways.  I need to prevent iPhones and iPads accessing a specific realm, but still allow Mac OS X PCs, Windows PCs and Linux PCs through; need force the iPhones and iPad users go through a mobile realm instead.  Is there anyway to do this with custom expressions on the realm by looking at the web browser MIME types for each OS?  I cannot use hostchecker because if cause too many issues with our corporate PCs.   Thank you.        ... View more

Does anyone know where I can find an updated Host Checker guide for the 7.0 software? The URL below is a Host Checker guide for 6.5 and is outdated on what OSs, Web Browsers and Java versions are supported for Host Checker. http://www.juniper.net/techpubs/software/ive/guides/howtos/How_To_Host_Checker.pdf Thank you ... View more

Now that Apple OSX Lion was release yesterday, Wednesday July 20th, 20011, does anyone know which SSL VPN code supports the Lion OS? I have users upgrading their Macs to this OS and are having issues installing the Network Connect client with Firefox. It seems that Safari is the only browser working so far. Thanks, John ... View more

Has anyone run across problems with inverse split tunneling, where the action is set to deny instead of allow on the split tunneling policy and the network that is excluded from the tunnel is 192.60.128.0/22. The way it should work is that everything is allowed through the tunnel except for the 192.60.128.0/22 network. The users are on the 192.60.128.0/24 network and cannot access network resources on the 192.60.130.0/24 network when using Network Connect. It seems that the traffic going to 192.60.130.0/24 is being tunneled. I have a ticket in for this, but I was wondering if anyone came across this and was able to get it to work properly. I am running 6.5R3.1 code on SA-6500s. Thank you in advance for any help you can offer! eagle107 ... View more

Hi Guys, Has anyone run across this problem below? One of our Business Partner seems to be having this problem. User Info: Most of the time the WSAM client is working. I have noticed if for any reason I launch our corporate Cisco VPN client to work remotely and then disconnect and exit out of the Cisco VPN client, I cannot log back into the WSAM client without first rebooting my computer. If I sign in after a fresh reboot, WSAM runs just fine. Once the Cisco VPN client has been connected and disconnected, I am no longer able to access the WSAM VPN client. Her company run the CIsco VPN client v5.0.05.0290. Our SA-6500 Gateways are running 6.5R3.1. Thanks for the help! ... View more

Some of our end users are complaining that they canÕt reconnect to SA-6500 Gateways when their laptops wake up from Sleep modeÓ or Hibernation mode"; the only way to reconnect is to reboot their PC. Users are stating that our old VPNRemote fat client (non-Juniper) seems to work fine when the PC/laptop wakes up, but not the Juniper Network Connect client. Has anyone else run across this problem. This is starting to become a major issue for us. The SA-6500 active/passive cluster is running 6.5R3.1 currently. Thank you for the help. ... View more

I have a number of Mac users complaining about upload performance issues running with the new 6.5R3.1 Network Connect client. I thought they were full of it, but I just ran a test on www.speedtest.com and I see what they are saying. On my same home internet link (and not running the test at the same time) connected to the same SA-6500 cluster, the Mac and Windows PCs get the same download speed of 9.5Mb/s, but the Mac is getting ~140kb/s upload speed while the Windows PC is getting ~2.41Mb/s upload speed. Has anyone else running across this same issue? If so, any ideas on how to fix this problem? ... View more

We are having issues with the Apple Mail App running very slow with the Mac Network Connect client. When uploading large email attachments to our Exchange 2007 servers using EWS, we are seeing only 3Kb/s to 10Kb/s transfer speeds and emails are taking over 20 minutes to send. We tested this using a T1 and an OC3 link with same results. Has anyone seen this same issue? ... View more

On our SA-6500 gateways, many of our users are complaining about sporadic disconnects when using the Windows and Mac NC client; our environment is composed of Win XP and Snow Leopard. The usersÕ NC tunnels do not show an error message when the tunnel disconnect happens, the NC client just states reconnecting and then after a minute or two the NC client reconnects. We have 1gb/s Internet links (utilization is currently at 140Mb/s), no network errors on the SA-6500sÕ or switchesÕ interfaces, the max session on the user role is set to 8000 and the idle time is set to 7000, we have roaming turned on and we have the session counters disabled (JTAC Tier 2 states enabling sessions counters on a role is a problem in 6.5Rx code). I have a ticket in for this issue, but tier 2 support is scratching their head over this. I have also upgraded our SA-6000 test units to 6.5R2 and 6.5R3.1, but I, along with other users, still see the same problem. I was wondering if anyone else has run across this problem and might know how to fix it. Thank you. ... View more

I was wondering if anyone had the 6.5R1 code running in production yet. If so, how is this code? Is it running well or are you seeing issues with it? 6.5R1 seems to have a number of fixes I need, but I am leary of putting an R1 version of code on our production units. Thank you, John ... View more

Since we have moved to 6.3R4, our Network Connect users have had problems connecting to the SSL VPN Gateways. They have been receiving the 23790 error when trying to connect. We found that the expections in the web browser were causing this issue. If you have an exception with *juniper.net, the Network Connect client will not allow the user to connect at all; however, if you change the exception to *.juniper.net, then the client works fine. This problem did not happen in 6.3R3. Hope this helps anyone who is having the same problem. ... View more

Has anyone seen a similar problem with the Sprint Smartview Air Card using Network Connect? I have attached a picture of the error message the user is getting. It seems that as soon as the user connects with Network Connect, Sprint is complaining that there are multiple connections. It seems that our other VPN client does not have this same issue. ... View more

We are getting ready to deploy a new Juniper SSL VPN Gateway solution using the Network Connect client for 19,000 users. Our current VPN client solution uses GINA. Juniper has stated that we should not use Network Connect's GINA if we are using Host Checker. Our issue is supporting end users who forget their passwords on their laptops. Today our Helpdesk will reset the end user's password and the end user will be able log into the corporate network using the GINA client first and then be able to login into the Windows domain using the new password. Now that we are no longer using GINA with the Juniper Network Connect client and end users forget their Windows domain password, it will be impossible for the Helpdesk help the end user to log into his/her PC. In addition, our security group will not allow us to create a local username and password on the end user PCs for the Helpdesk to use in order to help the end user access his/her PC locally; thus prevents the ability to bring up the Network Connect client and run the "Logoff on Connect" option which would allow the end user to use his/her new Windows domain password. I was wondering if anyone had this same problem. If so, what did you do to resolve this issue? I would hate to go back using Network Connect's GINA client due the some of the operational problems we have had with the GINA client. Thank you for your time. ... View more

Does anyone know if and when Juniper will support Trusted Platform Module (TPM) for HostChecker?  I would like to use this for my Windows, Linux and MAC platforms? Thanks, John   ... View more

We are experiencing problems mounting drives from a number of Samba servers when using the Network Connect client?  Our old fat IPSec client works fine.  Did anyone have this same issue?  We are running the 6.3R4 code on our SA6500 units.  Thanks  ... View more

Since moving to the 6.3R4 code, our Network Connect users have not been able to connect to the SSL VPN Gateway with their AT&T Air Cards.  To solve this issue, you need to turn off the web acceleration software feature on the AT&T Air Card.  Once that is done, the Network Connect client works fine.  We did not see this issue in 6.3R3 code.  Hope this helps anyone who is having the same problem.  ... View more