Android Support

[zanyterp]

---

rvo wrote:

I'm also looking for a fuctional way to connect an Android device (non-Samsung) to a Juniper solution. We have a SA2500 cluster for connectivity but sofar I've found no way to connect a non-rooted non-samsung Android. Is there any KB article or another way to follow the developments per vendor? I am specifically looking for developments surrounding Asus (Transformer) Android devices.

---

No, we do not have anything specifically on the Transformer device. What are you seeing for support/non-support? Any Android unit should be able to connect through for web-based only access. It is not possible to have L3 connections on non-rooted, non-Samsung devices.

For further information, you should follow-up with your account team.

[nahun]

Asus just released ICS (Android 4) for the original Transformer so you should be able to update it (at least in the US).

Juniper has said that Google added the L3 API into ICS, but the Pulse client still doesn't make a L3 connection with ICS on my transformer. Is the Pulse client not updated yet to take advantage of the native API in ICS?

[ThomasE66]

I have an Asus running 4.03 ICS. Pulse still doesn't work on it with regards to VPN. The API's are there in 4.0x but it appears Juniper has some work to do as well.

[prox]

Junos Pulse 3.2 made its way into the Play Store on 2012/04/05:

https://play.google.com/store/apps/details?id=net.juniper.junos.pulse.android

This version supports the native L3 VPN functionality on Android 4.0, although it didn't work for me (authenticated fine, but didn't actually connect after that - GN 4.0.3).

- Mark

[nahun]

Updated the app yesterday and works great on my Asus Transformer at 4.0.3, it gets full L3 tunnel. Glad they got this out.

[zanyterp]

Yes, that is correct: You need to use the Pulse 3.2 application (just released) in order to take advantage of the ICS VPN links.

[mattspierce]

We have been getting the error below "Unfortunatly Junos Pulse has Stopped on a fairly frequent basis.  Most clients have experienced the issue and all are on the current market version.  The issues has gotten worse since enabling the pulse security portal on the devices.  I get about 4-5 crashes a day.  The devices I know have the issue are divers.  One VZW GNEX running 4.0.2.  One HTC Thunderbolt run 2.3, and one HTC Incredible 2 runnig 2.3.  All devices are factory firmware.  The Gnex is encrypted but the other two are not.

[haas]

Doesn't work for me. ICS 4.04 on a moto xoom2 and as soon as I hit connect I get "file error – PleaseWait-mobile-webkit.thtml: not found"

Supposedly this is fixed in Pulse client 3.2 per KB but that is what I am running and no go.

[dcvers]

PleaseWait-mobile-webkit.thtml is part of the custom sign in pages on the appliance. If you are using Custom Sign-In pages and have not updated them after an upgrade you may find it missing. Not sure which release it was add in but I got this error (admittedly on an iPad) when I started testing after upgrading from 6.5 to 7.1. Updating the pages based on the new template solved issue

[rdit]

I have no problem to establish a Connection with the Asus Transformer Pad on ICS.

But its not working when I try to use a client-certificate - I can see "NoCert" in the logfiles of the IVE but I did everything that is mentioned here:

http://kb.juniper.net/InfoCenter/index?page=content&id=KB19692&cat=ssl_vpn&actp=LIST&smlogin=true

2 more questions:

-Why does the app need so many rights?

-What does Full L3 Tunnel mean in this case? Whats the difference? Do you mean an IPsec-Tunnel instead of just SSL?