10-06-2010 06:50 AM
Last I heard, Pulse 1.0 only supports dynamic VPN to SRXs and not SSGs. I don't know about future support.
04-10-2012 08:28 PM
Does Junos Pulse client support SSG IPSec VPN?
Which IPSec VPN Clients would you recommend to use with SSG IPSec VPN remote user access?
04-11-2012 01:54 AM
The built-in Windows 7 VPN client can also be used with the certificates and L2TP-over-IPSec. But there is a bug in ScreenOS (tested with 6.3). If multiple users try to establish a VPN from behind the same FW or another NAT-enabled device, using NAT-T, only the first user succeeds. The multiple IPSec VPNs are established correctly but only the first L2TP tunnel starts. The second tunnel cannot be started because ScreenOS incorrectly interprets the L2TP packets from the second client as arriving through the first L2TP tunnel. I consider it as a bug because the IPSec SA contains the original (private) client IPs (uniq IPs) along with the public IP (the same) used for the NAT-T. ScreenOS should be able to sort out which packet belongs to which client. Besides, L2TP packets are transported accross the two different IPSec tunnels and each L2TP tunnel is paired with its own IPSec tunnel.
04-11-2012 09:38 AM