Pulse Policy Secure. Supported Platforms Guide. Product Release 5.1. Document Revision 1.0 Published:

Transcription

1 Pulse Policy Secure Supported Platforms Guide Product Release 5.1 Document Revision 1.0 Published: by Pulse Secure, LLC. All rights reserved

2 Pulse Secure, LLC 2700 Zanker Road, Suite 200 San Jose, CA by Pulse Secure, LLC. All rights reserved Pulse Secure and the Pulse Secure logo are trademarks of Pulse Secure, LLC in the United States. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Pulse Secure, LLC assumes no responsibility for any inaccuracies in this document. Pulse Secure, LLC reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Pulse Policy Secure Supported Platform Guide The information in this document is current as of the date on the title page. END USER LICENSE AGREEMENT The Pulse Secure product that is the subject of this technical documentation consists of (or is intended for use with) Pulse Secure software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at By downloading, installing or using such software, you agree to the terms and conditions of that EULA. Revision History Changes for rebranding 2014 by Pulse Secure, LLC. All rights reserved

3 Table of Contents Introduction... 2 Administrator Web User Interface... 2 Pulse Secure Client Software... 3 Third-Party 802.1x Supplicants... 4 Agentless Access (Browsers)... 4 Agentless Access (Java-Based)... 6 MDM Solutions x Authenticators in Layer 2 Network Access Control Deployments... 9 Infranet Enforcers in Layer 3 Resource Policy Deployments IDP Devices in Coordinated Threat Control Deployments Network and Security Manager Compatibility by Pulse Secure, LLC. All rights reserved 1

4 Pulse Policy Secure Supported Platforms Guide Introduction This document describes the client environments and IT infrastructure that are compatible with this release. In this document, we identify compatibility testing for this release with the following terminology: Qualified Indicates that the item was systematically tested by QA for this release. Compatible Indicates that the item was not tested for this release, but based on knowledge or testing done for previous releases, we support it. Administrator Web User Interface Pulse Secure supports all items listed as qualified or compatible. Table1: Admin User Interface Table 1 lists supported platforms for the administrator user interface. Operating System Browsers/Java Qualified Compatible Windows Windows 8.1 Enterprise Internet Explorer 11 Windows 8 Enterprise, 64-bit Internet Explorer 10 Windows 7 Enterprise, 64-bit Internet Explorer 9.0 Firefox 24 ESR Oracle JRE 7 Windows 8.1 Professional Windows 8 basic edition / Professional, 32-bit or 64-bit Windows 7 Ultimate / Professional / Home Basic / Home Premium, 32- bit or 64-bit Windows 7 SP1 Enterprise, 32-bit Windows Vista Enterprise / Ultimate / Business / Home-Basic / Home- Premium, 32-bit or 64-bit Mac Windows P with SP3, 32-bit Internet Explorer 11 Internet Explorer 9.0 Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and Oracle JRE 6 and Mac OS 10.9, 64-bit Safari 7.0, Oracle JRE 7 Mac OS 10.8, 64-bit Safari 6.0 Mac OS 10.8, 32-bit Mac OS , 64-bit Mac OS , 32-bit Mac OS , 32-bit and 64-bit Safari 5.2, Oracle JRE 7 Safari 5.1, Oracle JRE 7 Safari 5.0, Oracle JRE Pulse Secure, LLC. All rights reserved

5 Pulse Secure Client Software Table2: Pulse Secure Desktop Client Table 2 lists platform requirements for the Pulse Secure desktop client. Operating System Browsers/Java Qualified Compatible Windows Windows 8.1 Enterprise, 64-bit Internet Explorer 11 Windows 8 Enterprise, 64-bit Internet Explorer 10 Windows 7 SP1 Enterprise, 64-bit Internet Explorer 9.0 Firefox 24 ESR Oracle JRE 7 Windows 8.1 Enterprise, 32-bit Windows 8 basic edition / Professional, 32-bit Windows 7 Ultimate / Professional / Home Basic / Home Premium, 32- bit or 64-bit Windows 7 SP1 Enterprise, 32-bit Windows Vista Enterprise / Ultimate / Business / Home-Basic / Home- Premium, 32-bit or 64-bit Mac * Windows P with SP3, 32-bit Internet Explorer 9.0 Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and Oracle JRE 6 and Mac OS Mac OS 10.9, 64-bit Mac OS , 64-bit Mac OS 10.8, 64-bit Safari 7.0 Safari 6.0 Oracle JRE 7 Mac OS 10.8, 32-bit Mac OS , 32-bit or 64-bit Mac OS , 32-bit Safari 5.2 Oracle JRE 6 Safari 5.1 Oracle JRE 6 Safari 5.0 Oracle JRE 6 * The Pulse client on Mac does not support 802.1x. Table3: OAC Odyssey Access Client (OAC) 5.6Rx and 5.5Rx are compatible with this release. Table 3 lists platform requirements for OAC. Operating System Browsers/Java Qualified Compatible Windows Windows 7 SP1 Enterprise, 64-bit Internet Explorer 9.0 Firefox 24 ESR Oracle JRE Pulse Secure, LLC. All rights reserved 3

6 Pulse Policy Secure Supported Platforms Guide Windows 7 Ultimate / Professional / Home Basic / Home Premium, 32- bit or 64-bit Windows 7 SP1 Enterprise, 32-bit Windows Vista Enterprise / Ultimate / Business / Home-Basic / Home- Premium, 32-bit or 64-bit Windows P with SP3, 32-bit Third-Party 802.1x Supplicants Internet Explorer 7.0 Firefox 3.0 and Oracle JRE 6 and Table4: Third-Party 802.1x Supplicants Table 4 lists platform requirements for third-party 802.1x supplicants. Platform Environment Qualified Compatible Windows Windows Windows 8.1 Enterprise, 64-bit Windows 8 Enterprise, 64-bit Windows 7 SP1 Enterprise, 64-bit Windows Windows 8 basic edition / Professional, 32-bit or 64-bit Windows 7 Ultimate / Professional / Home Basic / Home Premium, 32-bit or 64- bit Windows 7 SP1 Enterprise, 32-bit Windows Vista Ultimate / Business / Home-Basic / Home-Premium with SP 2, 32-bit or 64-bit Windows P Home with SP3, 32-bit Mac Mac Mac OS 10.9, 64-bit Mac OS 10.8, 64-bit Mac Mac OS 10.8, 32-bit Mac OS , 64-bit Mac OS , 32-bit Mac OS , 32-bit, and 64-bit Google Android Google Android Android 4.4, 4.3, 4.2, 4.1 Google Android ios Android 2.2 and Apple ios ios 7.1.x, 7.0, ios 6.x Apple ios ios 4.0 and Agentless Access (Browsers) Table 5 lists desktop platform requirements for the agentless access using browsers Pulse Secure, LLC. All rights reserved

7 Table5: Agentless Access (Browsers) Operating System Browsers/Java Qualified Compatible Windows Windows 8.1 Enterprise Internet Explorer 11 Windows 8 Enterprise, 64-bit Internet Explorer 10 Windows 7 SP1 Enterprise, 64-bit Internet Explorer 9.0 Firefox 24 ESR Oracle JRE 7 Windows 8.1 Professional Windows 8 basic edition / Professional, 32-bit or 64-bit Windows 7 Ultimate / Professional / Home Basic / Home Premium, 32- bit, or 64-bit platforms Windows 7 SP1 Enterprise, 32-bit or 64-bit Windows Vista Ultimate / Business / Home-Basic / Home-Premium with SP 2, 32-bit, or 64-bit platforms Mac Windows P Home with SP3, 32-bit Internet Explorer 11 Internet Explorer 10 Internet Explorer 9.0 Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and Oracle JRE 6 and Mac OS 10.9, 64-bit Safari 7.0 Mac OS 10.8, 64-bit Safari 6.0 Oracle JRE 7 Mac OS 10.8, 32-bit Mac OS , 32-bit Mac OS , 32-bit or 64-bit Safari 5.2 Sun JRE 6 Safari 5.1 Sun JRE 6 Safari 5.0 Sun JRE 6 Linux Ubuntu LTS opensuse 12.1 Firefox 24 ESR Oracle JRE 7 opensuse 10.x and 11.x Ubuntu 9.10, 10.x, and 11.x Red Hat Enterprise Linux 5 Solaris Firefox 3.0 and Oracle JRE 6 and Solaris 10, 32-bit Firefox 24 ESR Solaris 10, 32-bit Mozilla 2.0 and 2014 Pulse Secure, LLC. All rights reserved 5

8 Pulse Policy Secure Supported Platforms Guide Table 6 lists requirements for the smart mobile devices that can gain agentless access to the network using the Web browsers indicated. Table6: Smart Mobile Devices for Layer 3 Access Device/Operating System Browsers/Java Qualified Compatible Apple ios ios 7.1, ios 7 ios 6.1 Safari browser ipad or iphone with ios 4.0 and Safari browser Google Android Android 4.4 Android 4.3 Android 4.2 Android 4.1 Android native browser Android smart phones with Android 2.2 and Android native browser RIM Blackberry Blackberry OS 10 Blackberry native browser Blackberry smart phones with Blackberry OS 6 and Windows Mobile Blackberry native browser Windows Mobile 8 Internet Explorer Windows Mobile smart phones with Windows Mobile 6.5 Internet Explorer Symbian Symbian Devices with Symbian OS version 9.3: S60 3rd Edition Feature Pack 2 and Symbian Native Browser Symbian Devices with Symbian OS version 9.3: S60 3rd Edition Feature Pack 2 and Agentless Access (Java-Based) Symbian Native Browser Table7: Agentless Access (Java-Based) Table 7 lists platform requirements for the agentless access that is Java-based. Operating System Browsers/Java Qualified Compatible Linux opensuse 11.4, 32-bit Firefox 24 ESR Ubuntu LTS, 32-bit Oracle JRE Pulse Secure, LLC. All rights reserved

9 opensuse 11.x and 10.x Firefox 3.0 and Ubuntu 11.x, 10.x, and 9.10 Oracle JRE 6 and Red Hat Enterprise Linux 5 Platform Support for Device Onboarding Table 8 lists platform requirements for device onboarding features that are qualified with this release. Table8: Device Onboarding Features Operating System/Feature VPN Certificate Wifi ios 7.1.1, 7.1.2, 64-bit and 32-bit ios 8.0 ios 7.1 ios 6.1.x Android 4.4.3,4.4.4 Android Android 4.3 Windows 8.1 Desktop Windows 7 Mac OS , , Safari 7.x Mac OS , Safari 6.1.x Note: IOS and MAC OS are compatible for onboarding feature. Platform Support for AAA Table 9 lists platform requirements for third-party AAA servers that are compatible with this release Pulse Secure, LLC. All rights reserved 7

10 Pulse Policy Secure Supported Platforms Guide Table9: Third-Party AAA Servers Third-Party AAA Server Qualified Compatible Active Directory * Windows 2012 Windows 2008 R2 Windows 2003 LDAP using Active Directory Windows 2012 Windows 2008 R2 Windows 2003 LDAP using Novell edirectory LDAP using Sun ONE iplanet Server LDAP with Greatbay Endpoint Profiler LDAP (other standardscompliant servers) Novell Client for Windows 2000 / P Version 4.91 SP2 Sun ONE Directory Server 5.2 Beacon 4.1.1_11 OpenLDAP Authentication and authorization based on user attributes or group membership. RADIUS Steel-Belted Radius (SBR) 6.1 RSA Authentication Manager 6.1 Defender 5.2 Windows IAS 2008 RADIUS (other standardscompliant servers) ACE RSA Authentication Manager 7.1 SP4 RSA Authentication Manager 6.1 RSA Authentication Manager 5.2 Siteminder CA Siteminder 12.0 SP3 CA Siteminder 6.0 SP4 CA Siteminder 5.5 Certificate Windows Server 2008 R2 Certificate Services RSA Keon Certificate Manager Certificate (other standardscompliant servers) SQL Oracle 11g Express Edition * Additional requirements and limitations apply. See Active Directory. MDM Solutions Table10: MDM Vendors Table 10 lists the requirements for integration with mobile device management (MDM) vendors Pulse Secure, LLC. All rights reserved

11 Solution Qualified Compatible AirWatch Cloud service 7.0 Appliance OS Virtual appliance OS MobileIron Cloud service VSP build 8 Appliance OS Virtual appliance OS 802.1x Authenticators in Layer 2 Network Access Control Deployments Table11: 802.1x Authenticators Table 11 lists the 802.1x authenticators that have been qualified with this release x authenticators are Layer 2 Ethernet switches. In addition to the qualified platforms, other 802.1x standards-compliant Ethernet switches are compatible. Dynamic VLAN Platforms Hardware Models Junos OS Release RFC 3580 Support Qualified Compatible E Series E 8200 Junos OS 12.3R8.7 Yes E 6200 E 4500 E 4200 E 3300 E 3200 E 2200 SR Series SR 100 Junos OS D10, D20 No SR Series SR 3400 SR 1400 Junos OS D10, D20 Yes SR 650 SR 240 SR 220 SR 210 J Series J6350, J4350, J2350, J2320 Junos OS D10, D20 Yes 802.1x (other standards-compliant Ethernet switches) Endpoint Security Assessment Plug-in (ESAP) Compatibility 2014 Pulse Secure, LLC. All rights reserved 9

12 Pulse Policy Secure Supported Platforms Guide ESAP package version is the minimum version to be compatible with this release. The default version for ESAP is Infranet Enforcers in Layer 3 Resource Policy Deployments Table12: Infranet Enforcers Table 12 lists Infranet Enforcers that have been qualified with this release. Infranet Enforcers are enforcement points in Layer 3 resource policy deployments. In addition to the qualified platforms, other Screen OS, SR Series, and E Series models are compatible, provided the firewall or switch model and software version supports integration with UAC. Platform Hardware Models Software Versions * ScreenOS NS5400, NS5200 ScreenOS 6.3.0R15, 6.3.0R R18 SSG550M, SSG520M, SSG350M, SSG320M SSG140, SSG20, SSG5 SSG20 (Wireless), SSG5 ISG2000 with IDP Security Module ISG2000 ISG1000 with IDP Security Module ISG1000 J Series Junos OS 10.4R16 SR Series SR 5800 Junos OS D10, D20 SR 5600 SR 3600 SR 3400 SR 1400 SR 650 SR 240 SR 220 SR 210 SR 110 SR 100 E Series E 8200 Junos OS 12.3R3 E 6200 E 4500 E 4200 E 3300 E 3200 E 2500 IDP Devices in Coordinated Threat Control Deployments Table 13 lists the IDP devices that are supported. Table13: IDP Devices in Coordinated Threat Control Deployments Pulse Secure, LLC. All rights reserved

13 Hardware Models Software Versions IDP-8200 IDP-800 IDP-250 IDP R3 (Standalone) Network and Security Manager Compatibility IF-MAP Compatibility This release has been qualified with NSM s13 and NSM R4. Table14: IF-MAP clients Table 14 lists the IF-MAP clients that are supported. IF-MAP Client Qualified Compatible Connect Secure Policy Secure Third-party IF-MAP 1.x clients 2014 Pulse Secure, LLC. All rights reserved 11