- Pulse Secure Community
- :
- About Mathias1990_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Mathias1990_
Occasional Contributor
6
Posts
0
Kudos
0
Solutions
07-17-2014
06:46:AM
Hi Kalagesan Thanks for the reply. I will work with our SE to find the right solution for the customer.
... View more
07-16-2014
12:22:AM
Thanks for the reply. Would this be JTAC or an SE? See this is still on the draw board, so the hardware is yet to be bought.
... View more
07-15-2014
12:59:AM
Hi First of all, I'm not sure if this is the right place to post. I apology if I should have posted elsewhere. I'm playing a bit with a design of an HQ with Juniper UAC and Endpoint Profiler. The endpoint profiler should profile devices at my branch and the Juniper UAC be used for VLAN-assignment etc. based on the chosen profile. I have various options to collect the data centrally. DHCP is one thing. The DHCP-traffic can be forwarded from my branches by relaying it to the central EP via VPN. If I need to profile based on things like port numbers, I would need to have my branch traffic forwarded to the HQ to be watched by Endpoint Profiler - either the NetWatch or NetRelay module. Is there any limitation as to having Netflow / jflow data exported via VPN (would prefer this over exporting the data directly via internet). For example with Juniper SRX / EX switches but potentially also with switches or firewalls from other vendors like Cisco. Could also setup some kind of TAP / SPAN but then I wouldn't have the sampling benefits of the flow technologies. Any ideas?
... View more
11-13-2013
05:29:AM
I have an SRX. I want to try its dot1x capabilities. I also have an MAG-device setup in NAC-mode. I want users to receive a logon prompt on their machines upon plugging in a network cable. I want the SRX to pass the information (radius request) and the MAG to accept the request (radius accept). Optionally I would like the MAG to return additional attributes such as port VLAN ID. Can I have the MAG acting as a Radius-server it self? Or would I have to use an external authentication source and proxy through to that? It seems no matter what I do I can't make the MAG listen on port 1822/1823 or 1645/1646. Thus my SRX can't have users authenticated against the MAG. I have found several docs for configuring this, but they are ambiguous. That is confusing me. How to proceed?
... View more
09-24-2013
02:42:AM
Hi I have setup a little test environment. I have a Juniper SA 2500 enabling JunOS Pulse access to clients. The cliens obtain addresses inside their own network defined as a VLAN on my SA. I have my internal management interface on the same port of the SA. I have set it up as the native VLAN on my firewall, so management traffic won't get tagged. Everything works. I'm just a little worried about the fact, that my JunOS Pulse clients are able to manage the Juniper SA via the IP-address of the defined VLAN. Is there any way to prevent this access other than limiting management to specific source IP-addresses?
... View more
08-19-2013
03:12:AM
Thanks for the quick reply. I thought I could only deny/allow traffic from specific host addresses, but it turns out, that I can specify whole networks. I had to reboot the SA for the filter to take effect. Disconnecting Pulse wasn't enough. So this is perfect. Now I can play some more with VLANs. ;-)
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
