Then how SA responded with non-netconf command "ping -c 3 127.0.0.1", should not SA refuse any thing else if netconf subsystem is not specified by client? I also don't understand why he specified ssh option "rsaauthentication yes" yet he had to enter password. ... View more

I want to know that too, and according to Juniper's official statement, SA/MAG devices are not vulnerable. Besides, I don't understand why SA device would return XML stream after ping is executed. ... View more

Thanks, is this image a SSL-VPN server memory dump? or decrypted tcpdump from wire? if it is the latter, I am not going to be too concerned, because it takes time for the attackers to get the private key and even harder for them to intercept the communication(unless they are NSA), if it is the former, it is going to be very very scary. ... View more

Now that we patched the IVEOS and installed new cert on SA/MAG, can any Juniper SSL-VPN expert explain to me how the user authentication information is transmitted to the SA/MAG device? is it clear text over SSL or only a password hash is transmitted? in either case, are username/password saved in memory? because attacker can dump server memory, anything saved in memory could have been exploited, it is going to be a huge pain to force everybody to change their active directory password. ... View more

Well that is very helpful, only thing is that there is no IVEOS 7.3 for download on the software download page for SA and MAG series SSL-VPN, what now? ... View more

Please, do we have the ETA? ... View more

We've already revoked the cert, the problem is whether we need to shutdown remote access for unknown period of time ... ... View more

So do you guys just stop SSL-VPN service until the issue is resolved? ... View more