Knowledge Center Search


 

[SA Series/MAG] Support for Mac OS X 10.9 (Mavericks) and Safari 7 as a client operating system and client browser

  [KB28278] Show KB Properties

  [KB28278] Hide KB Properties

Categories:
Knowledge Base ID: KB28278
Last Updated: 24 Nov 2014
Version: 9.0

Summary:

Juniper Networks' SSL VPN platforms support Mac OS X 10.9 (Mavericks) and Safari 7 as a supported client to connect to SA Series and MAG SSL VPN platforms. This article outlines support for these applications, as well as some known issues and limitations.

Problem or Goal:

Lists support for Mac OS X 10.9 - Mavericks as well as known issues and limitations.

Cause:

Solution:
Juniper Networks has qualified and supports Mac OS X 10.9 starting with SA versions 7.4R7, 8.0R1 and higher. For details on which feature is supported in which release please refer to KB9212 - VPN tunneling client platforms supported with SSL VPN. Additional information, known issues, and limitations are listed here:


Junos Pulse Desktop, Endpoint Security (Host Checker), JSAM, Junos Pulse Collaboration, Rewriter and Java Applets:

  • What Server (SSL VPN and UAC) and Client versions (Junos Pulse) will be supported? If deploying Mac OS X Mavericks 10.9 and Safari 7, we recommend that customers upgrade to SSLVPN release 7.4R7 (or later), UAC release 4.4R7 (or later) and Junos Pulse release 4.0R7 (or later).
  • Support for Apple built-in firewall detection as an endpoint security host checker policy for Mac OS X Mavericks 10.9 is available in ESAP 2.4.6 available on the Juniper Support site ESAP Software download page.

Known Issues and Limitations:

  1. Java Applets blocked by default: On Mac OSX 10.9 (Mavericks), Safari 7's default action for Java applets is to block them. This prevents Pulse, Host Checker and JSAM from launching when accessed via Safari (912652, 922721) To work around this problem, do the following steps:

    • Use Safari to browse to the SA or IC. Log in and attempt to deploy Pulse (this will not work).
    • Open Safari Preferences, click the Security tab and choose "Manage Website Settings..." next to the Internet Plug-ins checkbox.
    • Click on Java and find the SA/IC URL listed on the right column. Change the pulldown for that listing to "Run in unsafe mode".

  2. Junos Pulse Desktop: Due to the default gatekeeper settings on Mac OSX 10.8 (Mountain Lion) and OS X 10.9 (Mavericks), installing Junos Pulse using the stand-alone installer package using the Finder may fail. As a workaround, in the Security and Privacy Settings, "Allow applications downloaded from" should be set to "Anywhere" (812263)

  3. Premier Java RDP Applet: Issues with using this feature when the color depth option is set to 8 bit. The workaround is to use 16 bit or 32 bit color depth setting (932856).

  4. Endpoint Security/Host Checker/ESAP: Apple firewall on OSX 10.9 (Mavericks) is not detected. The issue is that the Apple Built-in Firewall on Mac OS X 10.9 (Mavericks) is not supported on ESAP 2.4.5 and earlier. Upgrade to ESAP 2.4.6 (available on the Juniper Support site) and create a Host Checker policy for this version to resolve the issue (931762).

  5. Junos Pulse Collaboration: Users unable to join meetings and get error message "You cannot access the meeting because your session has expired. Please rejoin the meeting." This issue is fixed in 7.4R8 and 8.0R1.1 (948184). For more details, refer to KB28579 - [Junos Pulse Collaboration] Unable to launch or join/connect to a meeting after upgrading SA Series / MAG Series device.

Network Connect:

Network Connect client is not supported on Mac OS X Mavericks 10.9 and Safari 7. Junos Pulse Desktop can be used as a VPN client instead of Network Connect. Please refer to the Junos Pulse Documentation Page for more details on this unified multi-services client. 



Note
: To submit feedback on this article, fill out the ‘Article Feedback’ form in the right column. If you do not see the ‘Article Feedback’ form, then log in with your user account, and the form will be displayed. If you do not have a user account, you may also submit feedback here.

Purpose:
Configuration
Implementation
Installation
Interoperability
Specifications
Troubleshooting

Related Links:

 

 

ASK THE KB

Question or KB ID:


 


 

 
Copyright© 1999-2012 Juniper Networks, Inc. All rights reserved.