[j-nsp] Infranet controller solution

Bill Blackford bblackford at gmail.com
Fri Oct 28 10:49:43 EDT 2016


I was told by our SE that the newer models of SRX will no longer support Pulse Secure. I've also had to downgrade code to get older models to support it as well.

Sent from my iPhone

> On Oct 28, 2016, at 00:59, Michael Gehrmann <mgehrmann at atlassian.com> wrote:
> 
> Hi James,
> 
> I'm only aware of Palo Alto and Juniper supporting this function. The next
> generation SRX (300 and 1500) have some pretty good pricing from what I
> have experienced.
> 
> https://www.pulsesecure.net/download/document/988/PulseSecure_Solution_Brief_PAN_PPS_d1v5.fin.pdf
> 
> I have experienced the Juniper integration with NAC and it works very well.
> 
> Cheers
> Mike
> 
>> On 28 October 2016 at 18:52, james list <jameslist72 at gmail.com> wrote:
>> 
>> Hi Mike
>> here the functionality I'm looking for in the firewall device:
>> 
>> - integration with MAG Pulse Secure
>> - policy enforcement using at least destination ip address, port and
>> protocol
>> - policy enforcement with action at least like allow, deny, reject
>> - policy enforcement based on user role
>> 
>> Cheers
>> James
>> 
>> 
>> -
>> 
>> 2016-10-28 7:21 GMT+02:00 Michael Gehrmann <mgehrmann at atlassian.com>:
>> 
>>> Hi James,
>>> 
>>> Might be useful if you describe what functionality you are trying to
>>> achieve. i.e. SRX as an enforcer
>>> 
>>> Also you may not find many 'cheaper' alternatives in the TNC space:
>>> https://en.wikipedia.org/wiki/Trusted_Network_Connect
>>> 
>>> Cheers
>>> Mike
>>> 
>>>> On 28 October 2016 at 01:36, james list <jameslist72 at gmail.com> wrote:
>>>> 
>>>> Hi experts,
>>>> 
>>>> has anybody ever configured an infranet controller solution using MAG
>>>> (today Pulse Secure) other than using SRX firewall ?
>>>> 
>>>> 
>>>> I looking to find an alternative solution to SRX and as far as I’ve
>>>> searched till now, seems that only Palo Alto could do something. I’m
>>>> wondering if there are (cheaper) alternative…
>>>> 
>>>> 
>>>> Thanks in advance
>>>> 
>>>> 
>>>> Cheers
>>>> 
>>>> James
>>>> _______________________________________________
>>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>> 
>>> 
>>> 
>>> 
>>> --
>>> Michael Gehrmann
>>> Senior Network Engineer - Atlassian
>>> m: +61 407 570 658
> 
> 
> -- 
> Michael Gehrmann
> Senior Network Engineer - Atlassian
> m: +61 407 570 658
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp


More information about the juniper-nsp mailing list