4.4R4.0 PPS MDM Supported Platforms Guide

© Juniper Networks, Inc. 1

Junos Pulse Access Control Service 4.4R4-MDM Supported Platforms Document

Junos Pulse Access Control Service 4.4R4-MDM Build #22687 OAC Version 5.60.22687 Junos Pulse Client Version 4.0.4.38461

Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408 745 2000 or 888 JUNIPER www.juniper.net August 2013

http://www.juniper.net/



Table of Contents

Junos Pulse Access Control Service 4.4R4-MDM Supported Platforms Document ...................................................................... 1

MDM Solutions ........................................................................................................................................................................ 3

Network and Security Manager (NSM) Version ...................................................................................................................... 4

Administrator User Interface ................................................................................................................................................... 4

Qualified Platforms with Administrator Supported User Interface ....................................................................................... 4

Compatible Platforms with Administrator Supported User Interface ................................................................................... 4

Software Requirements ........................................................................................................................................................... 5

Hardware Requirements ......................................................................................................................................................... 6

Clients ..................................................................................................................................................................................... 7

Qualified Platforms with Junos Pulse Client ........................................................................................................................ 7

Compatible Platforms with Junos Pulse Client .................................................................................................................... 7

Qualified Platforms with OAC .............................................................................................................................................. 8

Compatible Platforms with OAC .......................................................................................................................................... 8

Qualified Platforms Agentless (Browsers) ........................................................................................................................... 8

Compatible Platforms Agentless (Browsers) ....................................................................................................................... 9

Qualified Platforms ( L3 Java Based Persistent Client) ...................................................................................................... 9

Compatible Platforms (L3 Java Based Persistent Client) ................................................................................................... 9

Qualified Mobile Devices with Native Supplicant for Device On boarding and Posture Assessment ............................... 10

Qualified Mobile Devices with Agentless/Browsers for L3 access .................................................................................... 10

Compatible Smart Mobile devices with Agentless/Browsers ............................................................................................ 10

Qualified Platforms (Third-party 802.1x supplicants) ........................................................................................................ 11

Compatible Platforms (Third-party 802.1x supplicants) .................................................................................................... 11

Qualified Juniper 802.1X Devices (Authenticators) .............................................................................................................. 12

Third Party 802.1X Devices (Authenticators) ........................................................................................................................ 13

Third-Party VPN Compatibility with OAC .............................................................................................................................. 14



Disclaimer

This document describes the devices and platforms including operating system/browser combinations that have been qualified for use with the Junos Pulse Access Control Service Agent and IC/MAG Series Junos Pulse Access Control Service Appliance.

Juniper Networks tests the mentioned functionalities on most widely used corporate and consumer platforms to qualify each platform as either qualified or compatible.

The platforms in this list are divided into two categories: compatible and qualified. The complete list of platforms/browsers in the document is supported. If problems are encountered on either a qualified or a compatible platform then Juniper support will attempt to resolve the issue.

Windows XP: Refers to Windows XP Professional/Home Edition

Windows Vista or Vista refers to Windows Vista Enterprise/Ultimate/Business/Home Basic/Home Premium

Windows 7: Refers to Windows 7 Enterprise/Ultimate/Professional/Home Basic/Home Premium

Windows 8: Refers to Windows 8 normal-edition/Pro/Enterprise/Windows RT

All of the information is valid on the date when the document was published. This applies to the comment for 'and

above' versions stated in this document as well.

Qualified Platform

The platforms listed in the “qualified” category have been systematically tested by QA department as part of the release covered by the Supported Platforms document.

Compatible Platform

The platforms listed in the “compatible” category have not been systematically tested by our QA department in this release but based on testing in previous releases and knowledge of the platform Juniper expects that the functionality will work and will fully support these platforms.

For all newer versions of browsers and operating systems please contact Juniper Support.

MDM Solutions

AirWatch Qualified Compatible

Cloud service 6.4.1.2

Appliance OS

Yes

Virtual appliance OS

Yes

MobileIron Qualified Compatible

Cloud service VSP 5.7.0 Build 376

Appliance OS

Yes

Virtual appliance OS

Yes



Network and Security Manager (NSM) Version

Junos Pulse Access Control Service 4.4 R4-MDM Qualified with 2010.3s9 and 2012.1R3

Junos Pulse Access Control Service Agent Minimum Requirements for Windows Platforms (Pulse and OAC)

CPU: 500MHz or above recommended for Windows Client

512 MB of RAM or higher recommended

Hard Disk: 30 MB minimum free space (does not include space required for log files)

Please refer to “Network and Security Manager Installation Guide” for platform recommendations.

Administrator User Interface

Qualified Platforms with Administrator Supported User Interface

Platform Operating System Browsers and Java Environment

Windows Windows 7 SP1 Enterprise, 64 bit

Windows 8, 64-bit

Internet Explorer 10

Internet Explorer 9

Firefox ESR

Oracle JRE 7

Compatible Platforms with Administrator Supported User Interface


Windows Windows 8, 32bit

Windows 7, 32-bit or 64-bit platforms

Windows 7 SP1 Enterprise, 32-bit

Windows Vista, 32-bit or 64-bit platforms

Windows XP with SP3, 32 bit

Internet Explorer 9.0



Firefox 3.0 and above

Oracle JRE 6 and above

Mac

Mac OSX 10.6.8, 32 bit and 64 bit

Mac OSX 10.7.3, 32 bit

Mac OSX 10.8, 32 bit



Safari 5.2 Oracle JRE 6



Safari 6.0



Software Requirements

IC/MAG Series Junos Pulse Access Control Service L3 Enforcer

Junos Pulse Access Control Service L2 Enforcer

IDP

Junos Pulse Access Control Service 4.4 R4-MDM

Qualified with SOS 6.2.0R15, 6.3.0R12

Junos Enforcer version 12.1X44-D2.3, 12.1R4.7

J Series Enforcer

qualified with JUNOS 10.4R12.1

Junos Enforcer

version 12.2R2

Qualified with 5.0R3,5.1R3 (Standalone) and Junos version 12.1X44-D2.3, 12.1R4.7



Hardware Requirements

Junos Pulse Access Control Service Appliance

Junos Pulse Access Control Service Enforcer

Standalone IDP

Junos Pulse Access Control Service IC4500 Appliance

Junos Pulse Access Control Service IC6500 Appliance

Junos Pulse Access Control Service IC6500 FIPS Appliance

Junos Pulse Gateway 2600 Access Control Service

Junos Pulse Gateway 4610 Access Control Service

MAG 6610 chassis with Junos Pulse Gateway Application Blade 160 Access Control Service




SOS Enforcer

ISG1000

ISG1000 with IDP Security Module

ISG2000

ISG2000 with IDP Security Module

NS5200, NS5400

SSG5, SSG20, SSG140

SSG320M, SSG350M, SSG520M, SSG550M

SSG5, SSG20 (Wireless)

JUNOS Enforcer

SRX 100

SRX 110

SRX 210

SRX 220

SRX 240

SRX 650

SRX 1400

SRX 3400

SRX 3600

SRX 5600

SRX 5800

EX 2200

EX 2500

EX 3200

EX 3300

EX 4200

EX 4500

EX 6200

EX 8200

IDP-75

IDP-250

IDP-800

IDP-8200



Installers and Agents -- Adaptive Delivery for Juniper client applications

In cases where ActiveX is disabled or is not available due to platform or privilege limitations, the client application is installed using Java. This dynamic installation mechanism is known as adaptive delivery.

Oracle JRE 6 or greater must be installed on the Windows and Linux client system to use adaptive delivery for Juniper client applications.

Clients

Qualified Platforms with Junos Pulse Client



Windows 8, 64 bit


Internet Explorer 9

Firefox ESR

Oracle JRE 7

Mac



Pulse IPSEC and 802.1x are not supported on Mac

Safari 5.2

Safari 6.0

Oracle JRE 7

Compatible Platforms with Junos Pulse Client












Mac




Pulse IPSEC and 802.1x are not supported on Mac






Qualified Platforms with OAC



Windows 8, 64 bit


Internet Explorer 9

Firefox ESR

Oracle JRE 7

Compatible Platforms with OAC












Qualified Platforms Agentless (Browsers)



Windows 8, 64 bit


Internet Explorer 9

Firefox ESR

Oracle JRE 7

Mac

Mac OS X 10.7.3, 64 bit

Mac OS X 10.8, 64 bit

Safari 5.2

Safari 6.0

Oracle JRE 7

Linux

Ubuntu 12.04 LTS

OpenSuse 12.1

Firefox ESR

Oracle JRE 7

Solaris ** Solaris 10, 32 bit Mozilla 2.0 and above



Compatible Platforms Agentless (Browsers)



Windows 7 Ultimate/Professional/Home Basic/Home Premium, 32-bit or 64-bit platforms


Windows Vista Ultimate/Business/Home-Basic/Home-Premium with Service Pack 2, 32-bit or 64-bit platforms

XP Home with SP3, 32 bit only






Mac




Safari 5.2 Sun JRE 6



Linux

OpenSuse 10.x and 11.x

Ubuntu 9.10, 10.x, and 11.x

Red Hat Enterprise Linux 5



Solaris * Solaris 10, 32 bit Mozilla 2.0 and above

Qualified Platforms ( L3 Java Based Persistent Client)

Platform Operating System : List of browsers and Java Environment

Browsers and Java Environment

Linux

OpenSuse 11.4, 32 bit

Ubuntu 10.04 LTS, 32 bit

Firefox ESR

Oracle JRE 7

Compatible Platforms (L3 Java Based Persistent Client)


Linux

OpenSuse 10.x and 11.x

Ubuntu 9.10, 10.x, and 11.x

Red Hat Enterprise Linux 5





Qualified Mobile Devices with Native Supplicant for Device On boarding and Posture Assessment

Platform Hardware: Operating System : List of browsers

Apple iOS iOS 6.1

iOS 5.0

Google Android

4.1, 4.2

Windows Mobile Windows Mobile 8

Qualified Mobile Devices with Agentless/Browsers for L3 access


Apple iOS iOS 6.1: Safari Browser

iOS 5.0: Safari Browser

Google Android

4.1, 4.2 : Android Native Browser

RIM Blackberry

10: Blackberry Native Browser

Windows Mobile Windows Mobile 8: Internet Explorer

Compatible Smart Mobile devices with Agentless/Browsers


Apple iOS iPad or iPhone with iOS 4.0 or above using Safari Browser

Google Android

Android smart phones with Android 2.2 or above using Android Native Browser

RIM Blackberry

Blackberry smart phones with Blackberry OS 6 or above using Native Browser

Windows Mobile Windows Mobile smart phones with Windows Mobile 6.5: Internet Explorer

Symbian Symbian Devices with Symbian OS version 9.3: S60 3rd Edition Feature Pack 2 or later using Symbian native browser



Qualified Platforms (Third-party 802.1x supplicants)

Platform Operating System : Third party 802.1x supplicants


Windows 8, 64 bit

Mac

Mac OS X 10.7.3, 64 bit

Mac OS X 10.8 64 bit

Cisco Secure Services

Client 4.0.51.5192

Google Android Google Nexus S running Android 2.3.4:native 802.1x supplicant for wifi connections

Apple iOS iPad2 running iOS 4.3: native 802.1x supplicant for wifi connections

Windows SOH (System of Health) licenses have been tested with native supplicants

Compatible Platforms (Third-party 802.1x supplicants)

Platform Operating System


Windows 7 Ultimate/Professional/Home Basic/Home Premium, 32-bit or 64-bit platforms


Windows Vista Ultimate/Business/Home-Basic/Home-Premium with Service Pack 2 , 32-bit or 64-bit platforms

XP Home with SP3, 32-bit

Mac

Mac OS X 10.6.8, 32 bit and 64 bit

Mac OS X 10.7.3, 32 bit

Mac OS X 10.8, 32 bit

Google Android Android smart phones running Android 2.2 or later

Apple iOS Apple iPhone and iPad running iOS 4.0 or later



Qualified Juniper 802.1X Devices (Authenticators)

Device Model Firmware Qualified

Dynamic VLAN RFC 3580 Support

Notes

Juniper EX Series

EX 2200, 3200, 3300, 4200, 4500, 6200, 8200

JUNOS 12.1R4.7,

12.2R2.4

Yes EX Series Switch Software Features Overview” document for more details on 802.1x features supported with EX series switches: http://www.juniper.net/us/en/products-services/switching/ex-series/#products

Juniper SRX Series SRX 100

JUNOS 12.1X44-D2.3,

12.1R4.7

No SRX 100 Series Software Features Overview” document for more details on 802.1x features supported with SRX 100 series: http://www.juniper.net/us/en/products-services/security/srx-series/srx100/

Juniper SRX Series

SRX 210, 220, 240, 650

JUNOS 12.1X44-D2.3,

12.1R4.7

Yes SRX Series Software Features Overview” document for more details on 802.1x features supported with SRX Series: http://www.juniper.net/us/en/products-services/security/srx-series/

Juniper J Series

J2320, J2350, J4350, J6350

JUNOS 12.1X44-D2.3,

12.1R4.7

Yes J Series Software Features Overview” document for more details on 802.1x features supported with J Series: http://www.juniper.net/us/en/products-services/routing/j-series/

http://www.juniper.net/us/en/products-services/switching/ex-series/%23products

http://www.juniper.net/us/en/products-services/switching/ex-series/%23products

http://www.juniper.net/us/en/products-services/security/srx-series/srx100/

http://www.juniper.net/us/en/products-services/security/srx-series/srx100/

http://www.juniper.net/us/en/products-services/security/srx-series/

http://www.juniper.net/us/en/products-services/security/srx-series/

http://www.juniper.net/us/en/products-services/routing/j-series/

http://www.juniper.net/us/en/products-services/routing/j-series/



Third Party 802.1X Devices (Authenticators)

Device Model Firmware Qualified

HP ProCurve 2524 F.05.17, ROM F.02.01

HP ProCurve 2626 H.08.98, ROM H.08.02

HP ProCurve 2810-24G (J9021A)

Software: N.10.02 ROM: N.10.01

Cisco 2950 12.1(22)EA1, c2950-i6q4l2-mz.121-22.EA4.bin

Cisco Catalyst 3750-48TS 12.2(25)SEB4

Extreme200-48 7.4e.2.6

3Com Super Stack 4400 switch

rev 4.51S

Enterasys Matrix 03.07.16.1

Linksys SRW2024 1.0.0.86

Netgear FSM726 2.6.2 (5245)

Cisco 1200 12.3(8)JA2

Orinoco AP-600 v2.3.1(554)

Proxim Orinoco AP700 v3.1.0(1052)

Netgear WG102 V4.0.6NA

Linksys WRT54GS 3.37.6

Airespace 1200 controlled by Airespace 3504 Switch

2.2.105.2 , boot version 1.2.59.6

HP ProCurve 420 2.1.2


Corporate and Sales Headquarters

Juniper Networks, Inc.

1194 North Mathilda Avenue

Sunnyvale, CA 94089 USA

Phone: 888.JUNIPER (888.586.4737)

or 408.745.2000

Fax: 408.745.2100

APAC Headquarters

Juniper Networks (Hong Kong)

26/F, Cityplaza One

1111 King’s Road

Taikoo Shing, Hong Kong

Phone: 852.2332.3636

Fax: 852.2574.7803

EMEA Headquarters

Juniper Networks Ireland

Airside Business Park

Swords, County Dublin, Ireland

Phone: 35.31.8903.600

EMEA Sales: 00800.4586.4737

Fax: 35.31.8903.601

Copyright 2011 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

Third-Party VPN Compatibility with OAC

Remote Access VPN Revision Coexistence Nested Tunnel Operation

SSLVPN - NC 7.3R2, 7.4R3 Supported Qualified

Nortel Client Version - 4_65.320 Nortel Contivity server 1010 version - V05_00.136

Supported Supported

(Not supported when VA is used.)

Cisco VPN 3000 Concentrator. vpn3005-4.7.2.I-k9.bin VPN Client: 4.8.01.0300

Supported Not supported

Netscreen Server: ScreenOS 5.4 R1 NSCN Client: 8.7

Supported Not supported

4.4R4.0 PPS MDM Supported Platforms Guide

Documents

Transcript of 4.4R4.0 PPS MDM Supported Platforms Guide