Integrate Google Analytics With Juniper IVE Custom Pages

- Go to Juniper Central Manager Page (SA6000)
- Select Authentication > Signing In > Sign-In Pages
- Click Upload Custom Pages
- Click on Sample template link and download it
- Unzip it
- Edit LoginPage.thtml
- Insert Google Analytic Tracking Code (ga.js or urchin.js) before the body tag
- Zip all the files back
- Enter the page name and click Browse button to upload your new zip files
- Go to Authentication > Signing In > Sign-in Policies
- Select your newly created custom page at Sign-In Page drop down menu
- Click Save Changes
- Test your new page functionality using https://www.abc.net/test
- If everything working fine, you may use the login page for the root URL (https://www.abc.net) by changing Sign-In Page at '*/' URL

Network Connect Logs

There are a few logs that need to be collected to further troubleshoot Network Connect issues. The following logs will be needed:

- User Access log.
- Network Connect client side logs
- Screenshot of the route table from the client machine before and after the Network Connect session gets established
- Screenshot of the IP configuration settings on the client machine before and after the Network Connect session gets established

If the Network Connect session never gets established, then the screenshots of the route table and the IP configuration settings will not be necessary).

For Windows Platforms:

Browse to C:\Documents and Settings\User Profile\Application Data\Juniper Networks\Network Connect X.X.X (where X.X.X is the version of Network Connect that is used, eg. 5.3.0).

In this folder, there are some text files, these are the logs that need to be collected. The files are labeled:

- NetworkConnect.log
- NCService.log
- NCService.log (May be located under C:\Program Files\Juniper Networks\Common Files\NCService.log)
- nclauncher.log (Present in 6.0 and above)

In addition to the files above there are two files under C:\Documents and Settings\User profile\Application Data\Juniper Networks\Setup that need to be gathered.

- JuniperSetupCtrl.log
- JuniperSetupDLL.log

Note: The following logs may also be present in the above two folders and should be gathered if found:

- C:\Documents and Settings\username\Application Data\Juniper Networks\Network Connect\NCDiag.log
- C:\Documents and Settings\username\Application Data\Juniper Networks\Network Connect\NcGINA.log

- C:\Documents and Settings\username\Application Data\Juniper Networks\Setup\NeoterisSetupCtrl.log
- C:\Documents and Settings\username\Application Data\Juniper Networks\Setup\NeoterisSetup.log

If the client side logging for Network Connect is not enabled, navigate to Start > All Programs > Juniper Networks > Network Connect X.X.X > NC Troubleshooting (where x.x.x is the version of Network Connect that is used) to open the troubleshooting window:

To collect the logs, click on the "Logs" tab, select the "Detailed Info" option and then click "Explore Log Files"
This will bring up a window with all the Network Connect logs in it. Get a copy of all the log files in that folder.

To gather the User Access log:
- Log into the IVE Admin Console. Browse to Logs/Monitoring > User access log.
- Ensure View by Filter is set to Standard:Standard and click Save Log As

To collect a screenshot of the route table and IP Config
- Before user established connection with Network connect, get route print and ipconfig /all info and Print Screen the output
- Repeat the process once the Network Connect session has been established

For Macintosh Platforms:
- Open up the "Finder" window click on 'Home' icon
- Navigate to Library > Logs > Juniper Networks > Network Connect. Get a copy of all the log files in that folder.

To collect a screenshot of the route table and IP Config
- Open Terminal and type netstat -rn and ifconfig.
- Take screenshot by pressing keys: command/apple + shift + 3
- Repeat the process once the Network Connect session has been established

For Linux Platforms:
- Navigate to: /.juniper_networks/network_connect. The necessary log files are located there.
- Open Terminal and type netstat -rn > filename and ifconfig > filename
- Repeat the process once the Network Connect session has been established

Network connect : Client System Checklist for Connectivity Access

When users are unable to access resources through the IVE (Instant Virtual Extranet), it is possible that there is a client-side firewall software, Anti-Malware, Anti-Spyware, or Anti-Virus that is preventing the access.

Begin by checking the settings on the client application software to verify that the IVE feature used is allowed access.

For Network Connect to communicate, the following ports must be open:

- UDP port 4242 on loopback address
- TCP port 443
- If using ESP mode, the UDP port configured on the SSL VPN ( default is UDP 4500)

If firewall filters are based on Application Name, use the following table to determine the process to permit:

- Host Checker/Secure Virtual Workspace (SVW) : dsHostChecker.exe
- Cache Cleaner : dsCacheCleaner.exe
- Windows Secure Application Manager (WSAM) : dsSamProxy.exe
- Network Connect (NC): dsNCService.exe / dsNetworkConnect.exe
- Windows Terminal Services (WTS): dsTermServ.exe
- Citrix Terminal Services : dsCitricProxy.exe
- Secure Meeting : dsCBoxUI.exe
- Juniper Installer Service : dsAccessService.exe

Juniper SA6000 - Enabling ActiveX, Sun Java, or Microsoft Java on Client System to work with IVE

User must be on a supported platform (both operating system and browser) to access the IVE (Instant Virtual Extranet ), or SSL VPN, or any of its features. If the user does not have a compatible OS or browser, they could experience connectivity issues

ActiveX
- verify that you have ActiveX enabled, check settings within Internet Explorer by selecting Internet Explorer's Tools menu and then on Options
- Next, click on the Security tab and then on the Custom Level button
- Make sure the following options are checked:

* Download signed ActiveX controls: Prompt
* Download unsigned ActiveX controls: Disable
* Initialize and script ActiveX controls not marked as safe: Disable
* Script ActiveX controls marked as safe: Enable
* Run ActiveX controls and plug-ins: Enable
- Click OK

Sun Java
- verify Sun Java is enabled, check the settings within Internet Explorer. With Internet Explorer opened, select Tools > Internet Options
- Next, click the Advanced Tab and scroll down until you see Java (Sun). Place a checkmark in the box (Use JRE..requires restart)

Microsoft Java
- To verify Microsoft Java is enabled, check the settings within Internet Explorer. With Internet Explorer opened, select Tools > Internet Options.
- Next, click the Advanced Tab and scroll down to Microsoft VM. Place a checkmark in the box (JIT compiler for virtual...(requires restart)
- Click OK or Apply to enable Microsoft Java