I must be a bit crazy to take on more work, but after a fair amount of interest coming my way for a new SSL VPN book I have decided to go for it and now plan to write another one.   Target completion date: Q1, 2011.

So, what would you like me to include this time around?

Yes, you read that right.  I am actually going to share the deep-dark-hidden details on how to save a great deal of money on Juniper SSL VPN licenses.  And, as the “Part I” in the subject implies, I’m not just going to stop with one post.  There are actually several really clever ways to save, and I intend to share each of them in as many separate blog posts as it takes. 

Part I:  Cluster Licenses Not Required

Continue Reading »

I am writing this one from the opening general session of VMworld 2010, where, as many of you know, VMware has now launched their new View 4.5 software.  So, now the question that many will want to know is: when will the Juniper SSL VPN support View 4.5, especially PCoIP?   Answer: Today! 

PCoIP uses both TCP and UDP, requires the View client, and offers the best possible user experience over a UDP-based tunnel.  That is where Network Connect (NC) when the ESP/UDP transport really shines.   All you need to do is configure a single Network Connect profile, make sure that UDP port 4500 is open to the external interface of the SSLVPN and then test to make sure that clients are connecting with ESP instead of SSL  transport.  It’s that easy.  But if you get stuck, just hit me up and I will do all I can to clarify any configuration, performance or scalability questions.

I would also like to have a call with first Juniper SSL VPN customer to come forward that uses the new Local Mode feature of View 4.5 to see how you plan to use it in production settings.

“We’re aware of a bug in iOS 4 that is causing a delay with the Pulse app and we are working with Apple to resolve it.”

Just wanted to keep everyone in loop here.  That’s the approved messaging and all that can be shared right now, but please keep checking back and as things change and clearance is given to detail things further I will be sure to blast it out.

Juniper and SMobile together…what a combination!   This, my friends, should be fun.  Those interested in reading more should definitely check out The Network Ahead blog entry.

When you get a chance, make sure you take some time to review the new sizing calculator.  What began as an Excel-based tool is now public, thanks to some web team help. 

Please keep in mind that this in beta and feedback is certainly welcome. 

The goal here is to let everyone know not only what it takes to run these boxes up to their maximum, but also show where there might be limitations for given design.  And by allowing everyone to access the same calculations that would otherwise involve reading a lengthy document and then engaging a Juniper sales SE for clarification, simplicity wins…as do you.   Next we will look at adding some mobile platform support.

Well it took a bit of extra time after we shipped 7.0 to get this to where it could be downloaded, but waiting is now rewarded. You can head over to the download site and pick it up.  But please remember that you must already be covered under an existing support contract for the SSL VPN product before accessing these files.  If you do, then you will have a valid logon that will entitle you to download this package.  Otherwise, you will just need to contact your friendly Juniper reseller.

Important:  The virtual appliance will expand out to somewhere around 3GB once  you have it in a .vmdk format.  To get it there, you will have to first use the VMware Converter to turn the .ovf into the .vmdk. 

As for support, there is no support (because there is no support contract that is sold for demo and training versions).  So for and questions or suggestions, just post them here and I will do what I can to help you out.  Sorry, no SLA commitments on that one. 

Here’s another really nice video showing the the configuration and user experience for View 4.0 with the SA product, courtesy of our technical marketing guru, Kevin Fletcher.

Thanks, Kevin!

Here are the screenshots for the new Junos Pulse client running on iPhone.

Continue Reading »

For those who are running the SPE virtual appliances, the license server is a requirement.  By simply installing the license server enabling license on any hardware capable of running the 7.0 software (SA2000, SA4000, SA6000, SA2500, SA4500, SA6500 — sorry, SA700 is not supported for this use case), a virtually unlimited number of licenses can be applied right on the license server.  Once the license are installed on the server, they can be easily moved around the various virtual appliances as needed.

Continue Reading »