09-25-2008 09:13 AM
You are right. But looking at the instantproxypac I don't understand when the FindClientProxy function was called?
I know, looking at Juniper documentation that the instantproxypac should be a merge file for browser settings and IVE settings. So I suppose that the what I see in the FindClientProxy function was read from the browser and what is present in FindClientProxy function was read from IVE.
J-TAC engineer told me to put the proxypac in a server and pass it directly from the IVE but It is not possible at the moment. In your experience have you seen the FindClientProxy function?
Thanks a lot for all
12-01-2009 10:47 AM
i Have a problem with a proxy, i can access my network through the IVE without a proxy configured on my browser, but when i configure it manually i can´t acces. it´s possible that the proxy don´t passthrough the DHCP of the IVE?
12-01-2009 12:16 PM - edited 12-01-2009 12:16 PM
You could also set a user's proxy setting via a NC start script (.VBS script that modifies the reg.) Not sure if that would help in your case however. The proxy settings could be removed by a logoff script.
Can you paste a 'ipconfig' for before and after you connect with NC? I can't think of a reason why a proxy server would break DHCP.
12-01-2009 11:27 PM
it's only a theory, because i can´t connect to the SA when the proxy is configurated on the browser. the "ipconfig" on the machine doesn't change because the connection is not established.
12-02-2009 07:35 AM - edited 12-02-2009 07:36 AM
I haven't seen an issue like you describe with NC before. I would test with another proxy if possible (squid would be a good test).
Next you can enable client side logging on the IVE for Network Connect, start a policy trace for the user, and do a wireshark on the PC for both the Juniper virtual adapter as well as the physical adapter, start a http watch as well in IE to record the login and web session, start a TCPDump on the IVE then try again. Take a look at the debuglog.log and see if you can find any errors. If nothing stands out then you can take these logs and open a JTAC case.
Also please note that NC will only work with HTTP proxys (such as squid), not socks or any other type. Also make sure you are using IE or Firefox for your browser.
12-09-2009 12:13 AM
Hi to all,
The problem was, that my proxy denies the traffic for the new ip's assigned from the ive. When i connect to the ive, i assign an IP to the virtual security interface of the client.