SSL VPN
Reply
Moderator
cbarcellos
Posts: 198
Registered: ‎07-11-2008

Quick tips: Troubleshooting HostChecker detection issues

[ Edited ]

I thought this might help some users:

 

First look at the logs:

 

  1. Run a policy trace for a user who has the issue.
  2. Check the access log for that user.
  3. Check the client side log "debuglog.log".

 

This should tell you why the user is failing.

 

ESAP information can be found in the following link: http://www.juniper.net/techpubs/software/ive/esap/

 

Make sure you are on at least 6.3x code as anything older does not have engineering support (Note: 6.3 will be end of engineering in March 16 2010 per http://www.juniper.net/support/eol/ive.html).

 

If you find an issue... see this KB: http://kb.juniper.net/KB12905 (Logs required for Juniper Support Case If Host Checker fails to detect a supported Anti-Virus or Firewall product).

 

Feel free to reply with your techniques as well.

Distinguished Expert
muttbarker
Posts: 2,377
Registered: ‎01-29-2008
0

Re: Quick tips: Troubleshooting HostChecker detection issues

Nice post - maybe you could pin this to the top like some of the firewall troubleshooting posts are pinned.

Kevin Barker
JNCIP-SEC
JNCIS-ENT, FWV, SSL, WLAN
JNCIA-ER, EX, IDP, UAC, WX
Juniper Networks Certified Instructor
Juniper Networks Ambassador

Juniper Elite Reseller
J-Partner Service Specialist - Implementation

If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
Moderator
cbarcellos
Posts: 198
Registered: ‎07-11-2008
0

Re: Quick tips: Troubleshooting HostChecker detection issues

Kevin,

 

Thanks; That's a good idea. I'll work on doing that.

Juniper Employee
chaminda
Posts: 15
Registered: ‎11-11-2009
0

Re: Quick tips: Troubleshooting HostChecker detection issues

[ Edited ]

This is a good KB12905. You have done an excellent job. It would be nice to inlcude location for MAC and Linux clients  

 

Host Checker stores the log files in the following location on the Macintosh client:

/Library/Logs/Juniper Networks.

 

Host Checker installs the following log files on Linux systems.

$HOME/.juniper_networks/dsHCLauncher_linux1.log$HOME/.juniper_networks/dsHostChecker_linux1.log

 

Contributor
ozmark
Posts: 17
Registered: ‎10-28-2008
0

Re: Quick tips: Troubleshooting HostChecker detection issues

[ Edited ]

To add a note on the Virus Scanner side of it; I find it very handy to check the Virus Update XML for the current

list of sigs - helps when a user says they have the latest and all I have in syslog is the software version.

 

EndPoint Security -> Virus Signature version monitoring -> Download Path

 

currently: https://download.juniper.net/software/av/uac/epupdate_hist.xml

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.