- Pulse Secure Community
- :
- About vcl_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
vcl_
Occasional Contributor
17
Posts
0
Kudos
2
Solutions
09-02-2014
01:47:AM
Well, at this point if this is a compatibility problem and not a configuration one, the only suggestion I have is to open a TAC case. Vincent
... View more
08-29-2014
01:44:AM
Is your AD a 2008? Pretty sure I've done that before "new" mode was implemented, but on a 2003.
... View more
08-29-2014
12:59:AM
Well, this log is quite "usual" when you hit a new setup for me. What I do usually is try to delete the IC account in AD, then recreate a new auth server in IC to force resubscription of IC in AD. Be sure to check your NTP also, can lead to failed authentication for a few sec delay, and the displayed log would be the one seen here, no specific message from AD, just a fail. Also, could try setting up your AD server as an LDAP auth server in IC, solved some problems sometimes. Vincent
... View more
08-29-2014
12:48:AM
This is a really brief description :p What I'll do in this case: - Isolate the exact pattern (all users/a group/a few), all IE11/IE mixed version/other - Then take some traces on a pattern matching user (policy trace, tcpdump client AND IVE side (internal/external) with dsrecord - If FTP is OK and HTTP is slow, for me could be: Proxy settings in IE? Backend Application? QoS settings on network? Vincent
... View more
08-27-2014
04:54:AM
Hello, Not sure if I well understood your needs, but you could use "virtual ports" to have several IPs on the same physical external ports. Never tested with different subnets however, I usually use them to separate flows: .1 is for core access .2 is for Pulse access .3 is for PTP It allows to have more visibility. Worth a try I guess, if it is possible to have 2 subnets on 2 virtual ports, then you may be able to use the routing table to make what you need. Vincent
... View more
08-27-2014
04:46:AM
Agree, in other words: MAG and formerly SA are hardware platforms, which runs the IVE OS software. There is no difference between IVE on MAG and IVE on SA, so the global secure access documentations should apply for you, just be sure to take the good documention for your version.
... View more
08-27-2014
04:43:AM
Already discussed the subject with some customers: there is no reason that a 2008 server should be used as an endpoint for me. So I guess the only solution is to check other parameters as suggested by Steve :)
... View more
08-27-2014
04:41:AM
Hello, This should answer all your needs: http://www.juniper.net/techpubs/software/ive/guides/howtos/SA-IC-MAG-SNMP-Monitoring-Guide.pdf Vincent.
... View more
07-03-2014
07:24:AM
Hello, I suggest opening a JTAC case instead of posting here if this is critical. However, you could have started with "hello everyone, does somebody already had this kind of issue and is able to help me please?" Maybe you could precise if this is a new setup, a change in your configuration (SA/Proxy/both/none)? In very latests version there is a bug if you use "auto detect proxy" settings in IE, but affects only Secure Meeting/COllaboration suite I guess. What is your proxy configuration? You could try to exclude SA hostname from your proxy pax configuration? Vincent
... View more
06-30-2014
01:42:AM
Hi, don't know if you solved it, but here is a good link from Juniper: http://www.juniper.net/techpubs/software/ive/guides/howtos/How_To_IVE_Cluster.pdf Also, to complete the excellent sayings of Kevin, the grace period is 10days in case of the loss of one member. Vincent
... View more
06-26-2014
06:51:AM
Self reply if that can help someone in the future: It was due to web process overload, nothing to do with DDoS.
... View more
06-24-2014
12:18:PM
Hi there, Only at the beginning of investigations but we encountered a crash of a MAG6611 cluster (SM360). The first thing I can see in logs are a lot o connections, from different publics IP, dropped in Events logs with reason :"wrong signature type" as an SSL event. This seems to happens at the very beginning of the session. I have two feelings: - IVE soft crashed and lots of users were so rejected with this error log - Kind of a DDoS with lots of SSL half-open sessions, who led to the IVE problem If anyone here encountered this kind of logs already, I'll be glad to read. Regards,
... View more
05-13-2014
06:07:AM
Hello guys, I encounter a strange behaviour using Pulse with other network-related software on clients sides. Riverbed clients seems to be the one leading to my problem with Pulse. We use SSL mode and not ESP. As I know/read somewhere, Pulse allocates itself 100Bytes on total packet size, letting 1360 free. In some case, using Riverbed client software, some packets are dropped througt the tunnel or at entry, probably because riverbed added some over-data to the header, which is now too long. My question is quite simple but not easy to find: - Do anyone can explain how much data Pulse in SSL mode adds to a packet? - Is it possible to tune the 100B reserved by Pulse to avoid problems?(guess the answer is no but..) Thanks for any help/advices on this one.
... View more
04-16-2014
08:17:AM
Auto-reply, if that can help anybody :) Linked to KB26656, it was due to the default limitation of Windows about Filter Drivers on the NIC. The max is 8 by default, and I was trying to deploy the 9th with this new Pulse version and his new driver. Workaround is to increase the value in reg key, or uninstall other filter before, like previous Pulse version, or unused software using this feature.
... View more
04-16-2014
06:14:AM
Hello, Is somebody else there encountering issues with the 5.0.3 release of Pulse? My problem: Web upgrade is not working as it fails criticaly (application stopping) at the step where it try to install the new Pulse Network driver (specificty of 5.0.3). Admin user, all AV/FW disabled. I noted in release note that it's recommanded to upgrade in web only if first install was done using web, and to upgrade using msi if first install was done in msi, no mixed mode. Its also noted that it shouldn't be an issue however, just not "clean" because old components would not be removed using a mixed upgrade (which is my case, msi deployment, trying to web upgrade), and it should be functionnal. I have a JTAC case, but seeing the number of people who should have gone to 8.0.R3.2 with Pulse 5.0.3, maybe someone has the same problem and already know some fix/workaround? Regards, Vincent
... View more
10-03-2013
07:07:AM
Hello Guys, Seeking for some experience about the Pulse BrandPackager for the customisation of Pulse UI: http://www.juniper.net/techpubs/software/pulse/gui des/j-pulse-5.0r1-brandingguide.pdf Wanted to see if people here used it, and with which results? Regards, Vincent JNCIP-SP/ENT/SEC JCNIS-WLAN, -SSL, -UAC
... View more
10-03-2013
01:13:AM
Seems a "old" topic but since you had no answers: Yes, you can ! JNCIP-SP/ENT/SEC JCNIS-WLAN, -SSL, -UAC
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
