About msarwar_

msarwar_ · ‎04-21-2015

Hi Amit, It depends what you want to achieve really. The whole point of split tunneling is typically used to route specific traffic over the SSL VPN. A lot of customer's I work with usually use split tunneling for internet traffic, so any traffic that goes to the intrenet is gone directly out their connection and not through the VPN. Say for exmaple you have two roles; employees and third party. You want all internet and internal traffic to go over the VPN for employess and for third party you want internet traffic to go out directly but all internal traffic via the vpn so they can access corporate resoruces. This can be accomploshed by creating two resource policies with the relevant split tunnelling configuration and assign them to the employess and third party roles. Hope this helps. Thanks. Mas

msarwar_ · ‎04-20-2015

Hi All, I've setup Pulse Secure Client to connect after the user logins to their desktop. The settings I've done is as follows: Connection is established: Specifcy mode: User Connect automatcially - checked Location awareness: When DNS server address(s) is 172.16.10.10 on any interface When I install the client on a windows 7 machine, log out and log back in the client prompts to enter a username and password. It's not automatically authenticating the user and establishing a VPN session. I've enabled Keberos under auth settings and reinstalled the client, but no luck. Running version 8.1 Thanks in advance. Mas

msarwar_ · ‎03-23-2015

As far as I'm aware TACACS isn't supported on MAG.

msarwar_ · ‎03-06-2015

You can block access based on the user-agent string TOR is using for example as of Dec 2014 the user-agent string for TOR is Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0 However, this does change a fair bit from what I understand so it'll be diffcult to keep track of the changes,

msarwar_ · ‎03-02-2015

Hi Jeff, Here is the datasheet https://www.pulsesecure.net/products/connect-secure/ The MAG4610 can handle 40,000 SSL concurrent users. Thanks. Mas

msarwar_ · ‎02-12-2015

If you're going to version 8 from 7.1 check if you need to do an inerim upgrade. I do recall with one client they had to go from 7.1 to 7.4 and then to version 8.

msarwar_ · ‎06-06-2014

Thanks Jay! Thought that may be the case.

msarwar_ · ‎06-06-2014

Hi All, I'm trying to see if there is a way for the SA to redirect non corporate users to a sign in page that uses 2FA, and if the device is a corporate device to only use AD i.e. don't need 2FA. I can see on hostchecker a policy can be enfored on the realm but can't see any settings to redirect them to a sign-in page. Doesn't look like it's possible, but worth an ask :). Thanks. Mas

msarwar_ · ‎09-05-2012

Hi All, I'm currently studying for the JNCIA-SSL track and have a copy of the study guide and IVE VM. Do Juniper have any lab packs to get some hands on experience? Thanks in advance! Mas

Re: Help me understand IVE

Pulse Secure Connect - Establish connection at log...

Re: MAG with TACAS

Re: Block users logging in via anonymous proxy

Re: JuniperMAG4610

Re: Need to upgrading SSL VPN

Re: Redirect users to a specific sign in page

Redirect users to a specific sign in page

SSL Lab Manuals