06-29-2012 07:00 AM
Has anyone tried to connect to the SSL VPN using OS X 10.8 Mountain Lion? We have hostchecking enabled in our appliance and the error we receive relates to the Host checker java app not being able to be executed.
Anyone experience this?
06-29-2012 08:00 AM
What is your SA release?
However, even with last 7.2, the last MAC OS supported version is 10.6.8.
06-29-2012 08:38 AM
We have both a test SA (Virtual) at version 7.2R2 (build 21017) and a production SA (MAG-4610) at version 7.2R1 (build 20645).
Both have not been working with 10.8 but have worked with 10.7 Lion & 10.6.8 Snow Leopard.
07-17-2012 02:45 PM
I just tried this on the GM build of OS X 10.8 and I was able to use teh Network Connect client without any issues.
We are not using Host Checker profiles, and the SA units are running code v 7.1R4
07-19-2012 08:38 AM
Once the client is installed on Mountain Lion it functions fine.
The problem is actually getting the client installed from the SA appliance. You go to the address of the SA and the Java HostChecker tries to run and fails which prevents the Junos Pulse client from being installed.
Currently as it stands the only way to get it running on a new Mountain Lion install is to manually install the JunosPulse.dmg.
We are also noticing an issue with Mountain Lion in which the Junos Pulse client will be automatically uninstalled when the computer is restarted.
07-19-2012 10:45 AM
Java is installed and the Java plugin is enabled. (By going to the Utilities folder under Applications and opening the Java Preferences app)
The HostChecker fails to even start up. It seems like the OS is blocking the install of the Java applet that the SA uses to push the HostChecker...
Thank you for all your help with this.
07-19-2012 10:54 AM
07-19-2012 11:19 AM
Thank you for your help.
It is nice to get a confirmation that Juniper is working on Mountain Lion compatibilty.
We expect to have new users in our system with new Apple hardware that will be running Mountain Lion by default so we want to make sure it will be supported eventually.
Obviously the sooner it is to the release the better, but glad to know its in the works.
07-27-2012 07:03 AM
This may be an issue realted to a security option withing OS X 10.8. Go to the Apple -> System Preferences -> Security and Privacy -> General
Then ensure that the 'Allow Applications Downloaded From' has the 'Anywhere' dial selected, other wise it may not allow the application to execute in the background.
I have not expereinced your specific issue however have had to change this setting for other applications which were not functioning the same as they did in Lion.
07-27-2012 03:28 PM
Have you opened a case for this issue? I've seen issues with Mac OS X 10.6.x machines due to permissions issue trying to move host checker files from a tmp directory to /Library/<Users>/Application Support. You should be able to confirm this by looking at the syslog on the Mac OS X machine. There will be a few lines displaying "Operation not permitted".
If you open a terminal, type 'syslog' and it should output on the screen. Copy this data and attach this to your open case.
07-30-2012 06:09 AM
Running an SA2000 on 6.5R7
I can confirm that the mentioned solution within Mountain Lion (Allow App download -> AnyWhere) must be allowed at least once by users needing to use ProperJavaRDP.zip etc (unsupported by Juniper afaik) At least works well in our environment! ( (in following sessions this app is already available to the Mac, so the settings can be changed back if wanted))
07-31-2012 10:50 PM
This is very strange.
I've figured out why applets some times will not load in Mountain Lion. Check out the screenshot - you'll see that ML refuses to trust the certificate because the key size is unsupported.
Note however in the 2nd screenshot, sometimes applets are signed with a different certificate that is fully trusted (issued by Verisign) and has no keysize or other issues. When applets are signed with this cert, everything is fine and the user can opt to allow the applet to run.
What I haven't figured out yet is what controls which certificate is used to sign the applets. It seems to me at the moment to be random.
We're currently running 7.1R6 in production.
08-01-2012 11:09 AM
Does anyone know if the Apple firewall has the potential to interfere with the HC install under either Mountain Lion or Lion? I have one Mac that sits at the HostChecker screen indefinitely and we just found out that it has the firewall enabled.
When time permits I will disable the FW and retest.
08-03-2012 07:50 AM
I have a user who is continuing to have issues with Mountain Lion. Specifically the Pulse client is uninstalled after each reboot. I've verified that he can execute from any source. I've ensured that Java is installed and enabled in safari. I don't knwo what else to try.