Is anyone aware of a feature in Juniper remote access VPN similar to that offered in Cisco ASA that allows a client to have a backup server listed as secondary via policy?  For example, if the user attempts to contact primary.example.com and if primary does not respond, the client automatically tries the next url listed in its configuration, secondary.example.com thank you ... View more

Out Pulse VPN install package fail with an error saying Windows Service Pack 1 is not installed on four systems now and not on a few hundred others with the same image.  The install log is below.. Strangely Pulse tried to install once, and if I use the plain .msi installer and uncheck all the options-- Junos will actually install.  If I check the options, Junos install starts and shows an 80% status bar before rolling back.   Any suggestions would be appreciated. ************************DUP-ENG-JunosPulseR3-3.0.2 3179-GBL-R2 Logging Started************************ 09/30/13 17:22:55 INFO: Determined Command is "CMD" with on which the application will install. 09/30/13 17:23:28 INFO: This tool is not compatible with this operating system, and will now exit. For more assistance, please contact your local Service Desk. ... View more

I have an interesting problem after an upgrade to SA 7.3R5 on MAG series appliances.  I have some user that login fine then Host Checker appears to run, twice, and indicates a good check but the users fail to login with a "No Rolls" error. The failed check is only for supported active AV software of various types and versions. I have tried all the usual stuff, clearing the cache, removing (including deleting all Juniper directories on the machine after uninstall) and letting the gateway re-install all software required by the gateway, and nothing seems to fix the issue.  The one interesting thing is that I can login with a different user account on these machines and login to the VPN gateway without issue. So that leads me to believe that there are some artifacts being left on the impacted windows user account even after uninstalling all software that is preventing the Host Checker software from running correctly.  Anyone have any insight on this issue? Keith ... View more

Hi All, I need information about the user rights for AD integration. Should it be domain admin? If yes could you please explain with its reasons. Best Regards, Ali ... View more

are there recommended isp upload/download speeds for connecting to juiniper sslvpn?  looking for minimum recommended speeds and also a "maximum" speed after which a connection to Juniper would not show any additional benefits ... View more

i have juniper sa, and my user have to login twice... fist login always failed although the username and password are correct. but the second login is succesfull. please help ... View more

Hi, I am after some assistance please. Can anyone tell me if you can run SSL VPN & UAC at the same time on any of the MAG series appliances? Thanks. ... View more

Hi, We are have SA4000 running System Firmware 7.1R5. The Problem we are facing is the installed NC Client is not storing the history.Every time we need to manually type the URL.this was not the case before we upgraded. Previously we were using NC Client 6.3 . I am stuck and need your kind help. ... View more

Hello, I purchased a SA 700 for my personal lab. Do I need any additional licenses to use interconnect or any other function of this box with just the base system ? Thanks Jeff ... View more

Hi, I don't know the Juniper but I will have soon a cluster of 4500  and I have some questions about They are 3 access methods (core,application layer and network layer). The Juniper will have the Wan and Lan interface in a separate DMZ (controled by a firewall) I will use one realm by country or some services now I would like Can you confirm me if possible If I don't make too many mistake ? It's not possible to use a realm with a termination in a separate vlan on the LAN interface It's not possible for core access and application layer accessto use a different IP address, all realm use the LAn ip address For the network layer access I can use a different IP or a pool by realm Can I use a policy base routing function (based on source or desdination or port) to redirect some flow to an other gateway. How can I split or separate the flow with the core or application access. Thanks for your reply ... View more

HI We are planning to Upgrade 2nos. - SA 4500 in cluster. Current version of IVE 6.3 R1(build 13557) to IVE 7.0R4.0. i would like to know if there are any document available to guide us through the upgrade process. Any tools to verify the current configuration etc... Any Help would be helpful cheers Ramp ... View more

Hello, Can someone tell me the maximum number of realms that can be configured on a SA4500 appliance ? ... View more

We used to have the ability to annotate as presenter in a secure meeting on our SA ver6.9, but  the feature no longer appear to be available with 7.2 Am i correct in assuming that the ability to annote has been removed from Pulse Collaboration.  If it is still avaliable, how can it be enabled? I dont see an option anywhere in the toolbar in Pulse Collab,. for annotation. Trevor ... View more

Hi all, I am having issues making a NSM report. Want to see VPN load, source interface, but I can't find a option to put in dates. Could anybody be so kind to help/inform me? :-) Thanks... ... View more

Hello everyone, I'm having difficulty working with Virtual Host + Authorization. In my customer environment I have a backend server that is accessed by users and legacy  applications through the follow URL. Backend server: "http://myserver.local/subpath-X/subpath-Y" (Subpath-X and Subpath-Y  names may vary depending on the application or user that will access the server) My IVE will mediate this traffic now, so I should create a virtual host  "myserver.mycompany.com" so that when the user access the URL  "myserver.mycompany.com/subpath-X/subpath-Y" he will be authorized based on your  Certificate Attributes, and then either redirected to  "http:/myserver.local/subpath-X/subpath-Y". But according to the admin guide, the  "Authorization-only" sign-in policy only work with Siteminder as authorization server.  My customer needs to authorize the access to virtual host based on attributes of the  User Certificates. We can't do the publishing using sign-in host and path to URL because it doesn't work  when the request has variable subpath (the log doesn't show subpaths in LoginURL  variable). Someone also went through this situation? Best regards, ... View more

Hi, Not familiar with juniper , and could not understand if and what is  required to install on mobile device in order to perform activsync. How is the user indentiified-  is it only by his credentials or also his device ID or something else? Does juniper support all mobile device- such as android and iphone? Thanks for your help. ... View more

Hi all, Is there a way to block the creation of vpn connection when we are on the corporate network. Here is what I mean : The pulse client is configure with location awareness but with allow user to override connection policy set to on. Location awareness works but when we are on the corporate network, since we enable the option to override, we can actually start a tunnel when connected to the corp. network. hope im clear thanks. ... View more

We have a citrix Xen solution, whereby users browse to a Xen broker onport 443, log in to the xen solution and get presented with a desktop to work on. I would like to have the same ability through the SSL VPN on SA4000. I tried with WSAM, i can get to the presentation of the xen desktop but when i click on it, it opens up a new window but just keeps hanging waiting to get to a windows logon screen. I have opened up ports 443, 1494,2598 on firewall but have no joy in having a complete end to end connection. Are there any other ways of configuring, i tried Termianl services Profile, on the XML IP , i have put on the ip address of the broker server, and had ports 1494, 2598 allowed via the policy. Both the solutions didnt work Any help will be apprecited ... View more

Hi, i just upgraded SA4000 to 6.5R1 especially to have Xen Desktop via broker services working. All i have done is created a resource profiles with the ip address of the broker on port 443. i then assigned this profile to the group of users. the users then have to log into the broker to get access to their desktop. When i log on to the SSL VPN , i get a message " unable to create Xen Desktop contact administator." looking at the citrix client delivery section , the URL ( listed below) goes to a unknown page. http://www.citrix.com/English/ss/downloads/details .asp?downloadId=1681207&productId=186&c1=sot2755 Am i configuring it the wrong way , do i need to use WSAM or client applications ? Does anyone know the right URL? any help will be great ... View more

i am struggling to get a web based app to upload and download files to my local drives. the app is a java based app, where users can download the file to local drive work onit and then upload it back to the server. the issue is the SA4000 adds its ip address before the actual URL and hence the server does not recognise it. Eg on the web based login i have http://192.168.X.X i can browse to the server, login , the java applet starts . when it comes to uploading files i cant do that. The server needs to see http://192.168.X.X coming in but the IVE sends it out as https://194.72.X.X/iw-cc/192.168.X.X how can i hide the IVE url and let the client browse to server as http://192.168.X.X/iw-cc and let it upload/download files to local client drives can i use J-SAM if so how do i go about this ... View more