Juniper SSL VPN and UAC Host Checker Issue

Published: 2013-12-31
Last Updated: 2013-12-31 18:54:11 UTC
by John Bambenek (Version: 1)
5 comment(s)

A few readers have written asking about odd denials when trying to use Juniper VPNs.  Turns out they released a Product Support Notification (subscription required) about their host check feature which fails on endpoints that have a local date set 12/31/2013 or later.  There are working on a fix but as a workaround, you can change the local date on the PC, disable host checker verification all together or create a manual host checker process that disables checking firewall, anti-virus and/or anti-spyware predefined checks.  Juniper plans to release a fix some time between 12/31 and 1/3/14.

John Bambenek
bambenek \at\ gmail /dot/ com
Bambenek Consulting

5 comment(s)


ESAP v2.5.1 is now available and we successfully tested it on firmware v7.4.
It's been fixed. From the KB Article:

Update 12/31/2013 : 10:30 AM PST: Juniper engineering has fixed the issue and is made available via ESAP 2.5.1 release now available on the Support Site for download on ESAP Software Download Page. Please upgrade the ESAP package on the SA or IC device to mitigate this issue. Refer to the Admin Guide for your product for information/steps on How to Upgrade the ESAP package.
And to all of you folks who let your Juniper support lapse, well, Not So Happy New Year. :-(

I wonder if Juniper will do the right thing and make the download freely available. After all, this product was not sold on a subscription basis.
Have you contacted Juniper Support on this. Following is their contact information:
Thanks for mentioning how to clear out Juniper SSL VPN and UAC host checker issue. I'm being using same VPN service and I like to communicate with the Juniper customer care directly to resolve any problem regarding VPN related problem. I think it's a faster way to get solvency. There is another place name where you can actually find various virtual networking related problem solutions.

Diary Archives