SSL VPN
Reply
Visitor
atechadmin
Posts: 6
Registered: ‎03-26-2012
0
Accepted Solution

Junos Pulse on Ipad question

Hello All,

 

We are using an SA700 for our VPN clients and have an SSL device cert.  Everything works as it should when people use the network connect application on their laptops but the Junos Pulse app gives an invalid cert warning when trying to connect.

 

Answering igbnore to this warning allows the app to connect and the client can then use the internal network.

 

My question is how do I resolve this cert warning?  INstalling the SA700 SSL cert on the Ipad did not fix this and does not appear in the cert list in Junos Pulse.

 

Thank you!

Moderator
zanyterp
Posts: 2,274
Registered: ‎11-19-2007
0

Re: Junos Pulse on Ipad question

Is the certificate a standard root CA? Is the root CA installed on the mobile devices?
Moderator
zanyterp
Posts: 2,274
Registered: ‎11-19-2007
0

Re: Junos Pulse on Ipad question

What happens through safari (for testing)? Can you unicast me the URL so I can take a look as well for more ideas?
Visitor
atechadmin
Posts: 6
Registered: ‎03-26-2012
0

Re: Junos Pulse on Ipad question

Sent you a message. Thanks
Visitor
atechadmin
Posts: 6
Registered: ‎03-26-2012
0

Re: Junos Pulse on Ipad question

Safari connects me and I can log on but then it stalls when I believe it tries to install network connect which of course will not work on the iPad.
Visitor
atechadmin
Posts: 6
Registered: ‎03-26-2012
0

Re: Junos Pulse on Ipad question

Yes certificate is a standard root. Tried installing on the device but it does not show in the pulse listing of certificates. Maybe I installed it incorrectly....opened it from email attachment and the iPad installed it.
Super Contributor
SHKM
Posts: 167
Registered: ‎03-13-2008
0

Re: Junos Pulse on Ipad question

Hi,

 

       Try installing Certificate using "iPhone/iPad  configuration utility" if it doesn't work, try using another certificate. To install the certificate using "iPhone/iPad  configuration utility", you can refer KB http://kb.juniper.net/InfoCenter/index?page=content&id=KB21438.

 

Thanks,

Suresh

Moderator Moderator
Moderator
SVK
Posts: 193
Registered: ‎08-22-2011
0

Re: Junos Pulse on Ipad question

What is the certificate configured on the SA

 

1.  is it self-signed certifcate or issued by a private CA or Public CA?

2. what is the hostname of the SA and the hostname on the certificate?

3. How are you connecting from pulse using the Hostname or IP?

Visitor
atechadmin
Posts: 6
Registered: ‎03-26-2012
0

Re: Junos Pulse on Ipad question

1)  Cert is issued by GoDaddy

2)  If by hostname you mean URL...it is connect.atechdelivers.com for both the SA and the cert.

3)  Conencting from Pulse using the hostname.

 

Thanks

Moderator Moderator
Moderator
SVK
Posts: 193
Registered: ‎08-22-2011
0

Re: Junos Pulse on Ipad question

examining the certificate chain you have an intermediate certificate "Go Daddy Secure Certification Authority" Please refer the following KB and upload the intermediate certificate to the SA and Verify the behaviour

http://kb.juniper.net/kb15613

 

please mark this post as 'accepted solution' if this answers your question that way it might help others as well, a kudo would be a bonus thanks

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.