About chillipepper_

chillipepper_ · ‎03-26-2015

We have set up our SA-2500's host checker to look for any available anti-virus defination on users computers, we recently have a user with chromebook and i believe chromebook does not have any antivirus and hence the host checker is failing. Has anyone got this working?

chillipepper_ · ‎02-12-2015

Our Netscreen 50 are detecting UDP floods from Juniper SA hitting the external interface of the firewall causing high memory usage on the firewall , the weired thing is this firewall is only for office wifi and and has no other routes to any of our internal network. Also the SA sits in our datacenter and is behind another firewall, any idea's where would this traffic be originating from the SA and Why? I have already looked up on the SA for routes and Vlan but didnt find any anomoly.

chillipepper_ · ‎01-27-2015

Thanks dlagace for the inputs followed the instructions and was able to set google auth as a dual factor auth to replace RSA , but i still couldnt get the second page to display token , it keeps prompting for "Secondary Password" which is the token, is there something that needs to be changed on the IVE so as to replace the word password as token instead?

chillipepper_ · ‎01-23-2015

We have set up a few link under custom text for the default sing-in page such as forgot password link which works as expected but the email link doesnt clicking on the email link gives this error message " The page you requested could not be found" , but the same strings do work while configuring the reason string for host checker failure and launches the outlook client to send email. Here's the string that i have for email links under default sign-in page <br> <br> If you have VPN questions, please <a href="mailto:[email protected]?subject=VPN Questions">email VPN Admins</a>. <br> <br>

chillipepper_ · ‎12-19-2014

It depends on what kind of virtual SA are you referring to.... if its a DTE ( Demo edition) it supports only 3 concurrent users and there is no license available to expand it , its more like a demo test box that can run on VMware. If you are looking for SPE ( Service Provider Edition) its a lot different and as far i know the minumum license starts with 2000 simultenous users but the actual thing lies in the hardware that is being used to deploy these if you have resources on your VM that can handle 1000 concurrent users go for it. But from my experience i have seen performance degradation on one of Sa-4500 i have , juniper says its suports 1000 concurrent but really after 600 users the performance drops significantly . You can find more info here http://www.juniper.net/assets/us/en/local/pdf/datasheets/1000320-en.pdf

chillipepper_ · ‎12-19-2014

Has any one configured Juniper SA in Dual-Port mode ? How does this work? Does that mean only 1 port will be used for both internal and external connections?

chillipepper_ · ‎12-09-2014

Is there a way to unblock user ip address if its locked by "Lockout Options" or do we have wait until the timer expires ? Can we unlock it by adding it to the restricted ip list under realms and then removing it, will that override the Lockout option settings?

chillipepper_ · ‎12-05-2014

It works with the max session timeout value, but that's not what we are trying to implement. We plan to keep the max session limit to 1 day but time out the session if there is no activity for 60 minutes and this is not working with Network connect or with Junos Pulse but it does if i use web browser to log in and access files via url or bookmarks.

chillipepper_ · ‎12-04-2014

We have users using Junos Pulse and Network Connect, i have already enabled session options and set the inactive timeout to 15 minutes, max session length to 60 and reminder time to 4 minutes yet the user who are away for 3 hours are still connected. Also enabled the Idle Timeout activity but i still see "Key Exchange " being carried out right before the inactive time out window hits. Has any one able to get this to work?

chillipepper_ · ‎12-03-2014

Thanks Kita i believe if config from SA can be loaded to MAG then it should be possible other way round as well.

chillipepper_ · ‎12-01-2014

We are planning to use MAG as back up device for our SA-2500 but not in cluster, has anyone deployed something similar? Can we use config off SA on MAG and vice-versa , since they both run on same IVE firmware.

chillipepper_ · ‎10-20-2014

They actually signout, but i guess the pulse/net-connect client signout process is different than the web sign-out process.

chillipepper_ · ‎10-13-2014

I thought this was an issue with the process cgi.exe that controlls users log in and log out sessions on the IVE

chillipepper_ · ‎10-09-2014

On our SA-2500 runnning 8.0R5 users are still shown as active users even after they have signed out hours before. Is the SA box still holding the session. Is this a known issue

Hostchecker issues on chromebook

UDP Flood on Screen OS from SA

Re: Google Authenticator

Email link under default sign-in page does not wor...

Re: Virtual SA appliance maximum concurrent sessio...

Configure SA in dual port mode

Manually Unblocking a Locked IP

Re: Inactive timeout not working on SA-2500

Inactive timeout not working on SA-2500

Re: SA-2500 and MAG2600 compatibilty

SA-2500 and MAG2600 compatibilty

Re: Users being shown as Active for hours after si...

Re: Client session was showing in active user tab ...

Users being shown as Active for hours after signou...