When allow all IP as remote protected resource is configured, "remote-protected-resource 0.0.0.0/0", then the Dynamic VPN does not work. Any traffic to the remote-protected-resource is not encrypted. Client Software (Access Manager/Junos Pulse) injects and changes route information on a routing table of the client OS, along with Dynamic VPN configuration when the VPN is … [Read more...]
Dynamic VPN access via Junos Pulse connection with username containing letter ‘P’ fails
This article displays the logs and issues seen when we try connection Junos with the username containing the letter "P'. The Dynamic VPN connection using the Junos Pulse client fails when the username contain the letter 'P'. Using the username "CA" or any other username the Dynamic VPN connection is correctly established. Note: There is no issue in downloading the Junos … [Read more...]
Junos Pulse for Android does not display the ‘Intranet’ link when connected to a VPN tunnel on a device running Android 4.0 and later
This article explains why Junos Pulse for Android does not display the Intranet link when connected to a VPN tunnel on a device running Android 4.0 and later. The Intranet link is not displayed by the Junos Pulse for Android application, when connected to a VPN tunnel on a device running Android 4.0 and later. This issue will occur when the following conditions are … [Read more...]
Using Junos Pulse to connect Dynamic VPN client to SRX
Using Junos Pulse to connect Dynamic VPN client to SRX Steps to connect Dynamic VPN client to SRX using Junos Pulse Note: This article will be updated regularly with new findings. Please check back for updates or click 'subscribe' at the top of the article to get notifications. Instructions for the SRX and client are as follows: SRX Follow the steps in the Dynamic … [Read more...]
Can a static MAC address for the VPN Tunneling virtual adapter be configured?
Can a static MAC address for the VPN Tunneling virtual adapter be configured? This article explains why this is not supported. It is desired to assign a static MAC address for the VPN tunneling virtual adapter, either Junos Pulse or Network Connect, due to the requirement of third-party software. No, it is not possible to have a static MAC address for the VPN Tunneling … [Read more...]
Configuring VPN on Demand for iPhone/iPad
This article describes how to implement VPN on Demand for the iPhone/iPad. Configure VPN on Demand on iPhone/iPad. From the App Store, download Apple Configurator on a Mac OS X device. Certificate authentication MUST be configured on the Pulse Secure gateway. Client certificates need to be issued for each user to install on their device (Refer to #7 for installation … [Read more...]
How to configure SRX to allow multiple Junos Pulse connections from the same user
This article provides information on how to simultaneously connect one user from different locations to the same SRX device by using multiple Junos Pulse connections. Currently, Junos Pulse does not have the support for allowing multiple connections from the same user. When a user tries to logon by using his/her credentials via Junos Pulse, SRX allows the connection. But … [Read more...]
Limitation for ECC device certificate use scenario
This article provides current design limitation information when ECC (Elliptic Curve Cryptography) device certificate used. Network Connect (NC) and Windows Secure Application Manager (WSAM) fail if Junos Pulse Secure Access device certificate uses ECC algorithm. Network Connect and WSAM do not support ECC algorithms such as ECDSA/ECDH cryptographic algorithms, even in … [Read more...]
iOS Profile Tab not Displaying
Junos Pulse Mobile Security Gateway (MSG) releases prior to version 3.0 did not support Apple's iOS devices. Enterprises upgrading from an earlier versions (pre 3.0) of MSG to version 3.0 or later will need the system admin account to be re-configured to support iOS profiles. iOS Profile tab is not displaying There was no support for iOS devices in earlier (pre 3.0) … [Read more...]
Does Junos Pulse support ESP Transport mode?
This article provides information about the compatibility of Junos Pulse with the ESP mode. Starting with Junos Pulse 3.0 and Junos Pulse Secure Access Service 7.2 and above, ESP transport mode is supported. Prior to Junos Pulse 3.0, ESP is not supported. Even if ESP is selected in the Connection Profile, the connection will be established with SSL. … [Read more...]