Junos Pulse for Apple ios

Transcription

1 Junos Pulse for Apple ios User Guide Release 4.0 June 2012 Revision 1.0 Copyright 2012, Juniper Networks, Inc.

2 Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785. Copyright 2012, Juniper Networks, Inc. All rights reserved. ii Copyright 2012, Juniper Networks, Inc.

3 Table of Contents Installing and Registering Junos Pulse...1 The Mobile Security Dashboard...2 Address Validation...2 Connecting with Junos Pulse...2 Adding a Secure Connection Profile...3 VPN On Demand...3 Connecting...4 Viewing Connection Status...4 Limited Access...4 Using Junos Pulse Collaboration...5 The Collaboration Toolbar...5 Anti Theft Features...7 iii

4 iv

5 Junos Pulse for Apple ios Junos Pulse lets you access protected network resources from your Apple ios device through a secure VPN connection. The security component, Junos Pulse Mobile Security Suite, includes anti theft tools to reduce the risks of a lost or stolen device: Additional information for Junos Pulse, including information on supported platforms, can be found at Installing and Registering Junos Pulse Junos Pulse VPN features and Junos Pulse security features are available through the Junos Pulse app, which is available from the Apple App Store. Downloading and installing Junos Pulse is the same as installing any ios app. You can download Junos Pulse and import it into itunes in order to install it on your ios device. Once you install Junos Pulse, do the following to automatically register Junos Pulse and begin using VPN and security features. 1. After the application has been downloaded and installed, browse to the registration URL provided by your administrator in an or in a text message. 2. Clicking the registration URL brings up the Junos Pulse EULA agreement. Tap Accept to continue. 3. You are next are prompted to Enable Junos Pulse. Tap the Enable button to continue. 4. You are then prompted to install the Junos Pulse security profile. Tap the Install button in the Install Profile screen. 5. A screen appears informing you that installing this profile allows your administrator to remotely control and access certain aspects of your device. This is necessary to provide security features such as remote lock and remote wipe. Tap the Install button to continue. 6. A screen displays informing you that the security profile has installed successfully. Security features are now in place for your ios device. 7. When you relaunch Junos Pulse, if your administrator has configured GPS location tracking services for your device, you are prompted to permit GPS location tracking using your current location. Click OK to allow this service. Click Don t Allow to decline. Copyright 2012, Juniper Networks, Inc. Installing and Registering Junos Pulse 1

6 Informational Note: If your ios device does not have Location Services turned on, when you launch Junos Pulse, a prompt appears informing you of this. From this prompt, tap the Settings button to go to the Location Services screen where you can turn the service on. You must then relaunch Junos Pulse to enable the GPS tracking report. Caution: Once you select Don t Allow or OK for GPS location services, your selection is remembered if you uninstall and reinstall Junos Pulse. You are not prompted again and your previous selection is used. If you want to reset this feature to change your selection, on your ios device, navigate to Settings > General > Reset Location Warnings. This resets all of the location warnings for all your applications. The Mobile Security Dashboard The dashboard is one of the servers with which you register your device. If you are given access to the dashboard (This access is optionally given by an administrator or service provider.), you can login to monitor your device, control some security settings, and change your address and password. You can access the dashboard web interface using a URL provided to you. For dashboard login and configuration details, please refer to the Junos Pulse Mobile Security Dashboard documentation. Address Validation After you first login to the dashboard, you receive an requesting that you validate your address. This contains a link that you must click to validate your address. After you click the link, a web page notification appears informing you that your address has been validated. Connecting with Junos Pulse In addition to the security features already described, you can use Junos Pulse to establish a secure VPN connection to your corporate network using your device s 3G, 4G, Edge or WiFi connectivity. Once a VPN connection is established, Junos Pulse can include the following features: Intranet: Launches connections to internal site configured by your administrator. Launches your application. Status: Lets you view, delete, and log files, which you might need to do in a troubleshooting operation. The log files show all security incidents, such as virus scan times and viruses discovered. If you have an established VPN connection, you can also view the status of that connection from this screen. About: Provides software version information. Informational Note: Screens for different ios devices may vary. For information on the Join Meeting button, refer to Using Junos Pulse Collaboration on page 5. 2 Connecting with Junos Pulse Copyright 2012, Juniper Networks, Inc.

7 Junos Pulse for Apple ios Adding a Secure Connection Profile You can add a VPN connection for each different network to which you connect. To define a connection profile, do the following: 1. Start Junos Pulse. 2. From the VPN tab, tap the Configuration button. If you have already set up one connection profile and you are adding an additional profile, tap Edit. 3. To establish a new connection, tap Add new configuration. The Add window opens. 4. Specify the connection profile properties. Name: The name or description for this connection profile. URL: The Web address provided by your network administrator. (Note that URL is the only required field when creating a connection profile. All other fields are optional.) Username: Enter your username. Certificate: If your network administrator has provided you with a digital certificate (typically via an attachment or SMS), tap Certificate. When the Identities window opens, select the certificate you want to use with this profile. If you do not use a certificate, you must provide a username and password when you use this connection profile. Realm: If your administrator has provided this information, enter the realm value. Role: If your administrator has provided this information, enter the role value. 5. Tap Save to return to the main Junos Pulse window. VPN On Demand You can use VPN On Demand to connect securely without having to manually establish a secure connection. When you use certificate based authentication, the Connect On Demand feature becomes visible. Configure VPN On Demand by doing the following: (Use the instructions from Adding a Secure Connection Profile on page 3 for the first part of the VPN On Demand configuration.) 1. When you tap Certificate in the Add connection screen and select the certificate, the Connect On Demand On/Off switch becomes available. Turn this switch to On. (You must use certificate based authentication if you are using VPN On Demand.) 2. Tap Add new rule to configure a Connect On Demand rule. 3. In the rule editor, enter the Domain name or Host name. 4. Select one of the following: Always establish: When a DNS (Domain Name Service) query is made for a host matching the rule's host or domain name, establish the VPN before proceeding with the DNS query. Never establish: Do not establish the VPN when a DNS query is made for the rule's host or domain name. This is used to exclude the host name of the VPN server itself from triggering VPN On Demand. Copyright 2012, Juniper Networks, Inc. Adding a Secure Connection Profile 3

8 Establish if needed: If a DNS query for the rule's host or domain name fails or times out, establish the VPN. 5. Tap Save. Informational Note: Your administrator can provide you with the appropriate VPN On Demand rule configuration. Connecting If you are not using VPN On Demand, once you have configured your connection, do the following to connect. 1. Start Junos Pulse. 2. From the VPN tab, tap Connect. 3. When the connection is established, enter information required by your administrator such as Username and Password. 4. Tap Sign In. Viewing Connection Status The status of your current connection also appears at the bottom of the Junos Pulse window in the form of an icon. The appearance of the icon indicates whether the connection is active, inactive, or limited by policy non compliance (see Limited Access on page 4). Active Connection No Session Limited Access The active connection icon also appears in the status bar at the top of your device screen. When you close Junos Pulse, that icon remains visible as long as your VPN connection is active. Limited Access To ensure the integrity of mobile devices that are accessing network resources, an administrator can enforce a security policy with which mobile devices must comply in order to connect to the network. If a device is found to be non compliant when attempting a secure network connection, only limited network access may be granted. When your device is non compliant, you are prompted with this information and you may be presented with a Continue button which you can tap to obtain limited network access. Reasons for non compliance may include the following: Your device has been jailbroken. Your device is running an operating system that is not allowed by the security policy. Your device not registered with the server. You must remedy the non compliance issue on your device before you can establish a full network connection. 4 Connecting Copyright 2012, Juniper Networks, Inc.

9 Junos Pulse for Apple ios Using Junos Pulse Collaboration By tapping the Join Meeting button from the Junos Pulse Collaboration tab, or the Attendee Smartphone URL in the received meeting invitation, you can launch Junos Pulse Collaboration from your ios device allowing you to view the meeting presenter's screen and to chat with other attendees from your iphone or ipad. To attend a meeting using Collaboration from your ios device, do the following: 1. You can launch the secure meeting in one of the following ways: From within Junos Pulse, select the Collaboration tab and tap the Join Meeting button. From your or calendar application, open the meeting invitation and tap the Attendee Smartphone URL link. 2. The login screen appears. In order to join the meeting, you must enter the appropriate meeting information in the corresponding login fields. The Server and Meeting ID fields are usually pre populated. Generally, you will need to enter a Username and Password and then tap the Login button to access the meeting. Informational Note: When you tap the Join Meeting button from the Collaboration tab, the information from the previous meeting is still there. You must enter the new meeting information to join a new meeting. 3. Once you log in successfully, if the meeting has started, you will see the meeting presenter s screen. If the meeting has not yet started, you may see the waiting bubble until the meeting does start. The Collaboration Toolbar When you tap the screen during an active meeting, the toolbar appears at the bottom of the screen. The buttons on the toolbar perform the following tasks: Collaboration Toolbar Chat: The first button on the left of the toolbar initiates a chat session. When you tap it, the chat screen appears listing the meeting attendees and allowing you to select All attendees to chat with, or one particular attendee. Copyright 2012, Juniper Networks, Inc. Using Junos Pulse Collaboration 5

10 1. To chat, select the Attendee and then tap the text input field. Enter your text and Tap Send. Your text is displayed to the Attendee(s) in question. 2. You can reply to a chat text by tapping the reply arrow beside the message. This gives you the option to Reply All or Reply Sender. From within a chat, you can click the button in the upper right hand corner of the navigation bar to toggle between attendees with whom you want to chat. Informational Note: On the ipad, you do not have to navigate away from the meeting to conduct a chat. You can view both screens at the same time. Dial to the meeting: The next button on the toolbar (the telephone button) allows you to use the native ios phone application to dial into the meeting. When you tap the phone button, the Dial to the meeting screen appears. Informational Note: Dial to the meeting is not available on the ipad. 1. To Dial to the meeting, you must enter the phone number for the meeting. Note that you can copy and paste the number from the Conference Information field. Both the Conference code and Pin number are optional. 2. Once you re dialed into the meeting, go back to Junos Pulse to continue the secure meeting. Informational Note: If you move away from the secure meeting screen, you can always return to the meeting by the tapping the Back to Meeting button in the Collaboration tab. Attendees: The third button from the left on the toolbar is the Attendees button. When you tap this button, the list of meeting attendees is displayed along with a Chat button beside each name. Tapping the Chat button from this screen allows you to launch a chat screen directed at the attendee in question. Meeting Information: The last button on the right of the toolbar is the Meeting Information button. When you tap this button, a screen displaying the Meeting Name, Meeting ID, Conductor, and Meeting Description appears. From this screen, you can tap the Forward Meeting button to generate an message that contains all the required meeting information. Enter the desired address(es) in the To field and send the meeting information to the recipient(s). Informational Note: The appearance of Collaboration screens on the ipad may sometimes differ from those on the iphone. 6 Using Junos Pulse Collaboration Copyright 2012, Juniper Networks, Inc.

11 Junos Pulse for Apple ios Anti-Theft Features There are a number of measures that can be taken to protect your device if it is lost or stolen. Those features include: Lock Device Locks the device if it is lost or stolen, or if you wish to stop the use of the device for any other reason. (Note that this lock can be overridden if you have not configured a passcode on the device.) Unlock Device Unlocks the device. Retrieve App List Updates the list of installed applications on the device. Wipe Device Sets device back to factory settings. GPS Tracking Tracks the GPS location of the device. Copyright 2012, Juniper Networks, Inc. Anti Theft Features 7

12 8 Anti Theft Features Copyright 2012, Juniper Networks, Inc.

13 Index Index A add secure connection anti-theft features automatic URL registration C collaboration attendees chat dial in join meeting, login meeting information smartphone URL toolbar connecting , 4 certificate name realm role status URL username connection add a connection VPN on demand connection profile properties M Mobile Security Dashboard R registration URL retrieve app list S security features GPS tracking lock device retrieve app list unlock device wipe device security profile install U unlock device V validate address W wipe device D dashboard E address validation enable Junos Pulse EULA G GPS tracking , 7 I installation J Junos Pulse Collaboration L limited access, non-compliance lock device Copyright 2012, Juniper Networks, Inc. Index 1

14 2 Index Copyright 2012, Juniper Networks, Inc.