Juniper Networks’ SSL VPN platforms support Mac OS X 10.9 (Mavericks) and Safari 7 as a supported client to connect to SA Series and MAG SSL VPN platforms. This article outlines support for these applications, as well as some known issues and limitations.
Lists support for Mac OS X 10.9 – Mavericks as well as known issues and limitations.
Juniper Networks has qualified and supports Mac OS X 10.9 starting with SA versions 7.4R7, 8.0R1 and higher.
Junos Pulse Desktop, Endpoint Security (Host Checker), JSAM, Junos Pulse Collaboration, Rewriter and Java Applets:
What Server (SSL VPN and UAC) and Client versions (Junos Pulse) will be supported? If deploying Mac OS X Mavericks 10.9 and Safari 7, we recommend that customers upgrade to SSLVPN release 7.4R7 (or later), UAC release 4.4R7 (or later) and Junos Pulse release 4.0R7 (or later).
Support for Apple built-in firewall detection as an endpoint security host checker policy for Mac OS X Mavericks 10.9 is available in ESAP 2.4.6 available on the Juniper Support site ESAP Software download page.
Known Issues and Limitations:
1.Java Applets blocked by default: On Mac OSX 10.9 (Mavericks), Safari 7’s default action for Java applets is to block them. This prevents Pulse, Host Checker and JSAM from launching when accessed via Safari (PR912652, PR922721) To work around this problem, do the following steps:
Use Safari to browse to the SA or IC. Log in and attempt to deploy Pulse (this will not work).
Open Safari Preferences, click the Security tab and choose “Manage Website Settings…” next to the Internet Plug-ins checkbox.
Click on Java and find the SA/IC URL listed on the right column. Change the pulldown for that listing to “Run in unsafe mode”.
2.Junos Pulse Desktop: Due to the default gatekeeper settings on Mac OSX 10.8 (Mountain Lion) and OS X 10.9 (Mavericks), installing Junos Pulse using the stand-alone installer package using the Finder may fail. As a workaround, in the Security and Privacy Settings, “Allow applications downloaded from” should be set to “Anywhere” (PR812263)
3.Premier Java RDP Applet: Issues with using this feature when the color depth option is set to 8 bit. The workaround is to use 16 bit or 32 bit color depth setting (PR932856).
4.Endpoint Security/Host Checker/ESAP: Apple firewall on OSX 10.9 (Mavericks) is not detected. The issue is that the Apple Built-in Firewall on Mac OS X 10.9 (Mavericks) is not supported on ESAP 2.4.5 and earlier. Upgrade to ESAP 2.4.6 (available on the Juniper Support site) and create a Host Checker policy for this version to resolve the issue (PR931762).
5.Junos Pulse Collaboration: Users unable to join meetings and get error message “You cannot access the meeting because your session has expired. Please rejoin the meeting.” This issue is fixed in 7.4R8 and 8.0R1.1 (PR948184).
Network Connect:
Network Connect client is not supported on Mac OS X Mavericks 10.9 and Safari 7. Junos Pulse Desktop can be used as a VPN client instead of Network Connect. Please refer to the Junos Pulse Documentation Page for more details on this unified multi-services client.