Junos Pulse Access Control Service 4.2R1 Supported Platforms Document Junos Pulse Access Control Service 4.2R1 Build 19091 OAC Version 5.40.19091.0 Junos Pulse Client Version 3.0.0.19307 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408 745 2000 or 888 JUNIPER www.juniper.net March 2012 Juniper Networks, Inc. 1
Table of Contents Junos Pulse Access Control Service 4.2R1 Supported Platforms Document... 1 Table of Contents... 2 Disclaimer... 3 Network and Security Manager (NSM) Version... 3 Junos Pulse Access Control Service Agent Minimum Requirements for Windows Platforms (Pulse and OAC)... 3 Administrator Supported User Interface:... 3 Software Requirements:... 4 Hardware Requirements:... 5 Installers and Agents... 6 Adaptive Delivery for Juniper client applications... 6 Qualified Juniper 802.1X Devices (Authenticators)... 11 3 rd Party 802.1X Devices (Authenticators)... 12 Third-party VPN Compatibility with OAC... 13 Juniper Networks, Inc. 2
Disclaimer This document describes the devices and platforms including operating system/browser combinations that have been qualified for use with the Junos Pulse Access Control Service Agent and IC/MAG Series Junos Pulse Access Control Service Appliance. There are certain we qualify listed below but other combinations may be compatible Network and Security Manager (NSM) Version Junos Pulse Access Control Service 4.2 R1 Qualified with 2010.4s1 and 2011.1s1 Junos Pulse Access Control Service Agent Minimum Requirements for Windows Platforms (Pulse and OAC) CPU: 500MHz or above recommended for Windows Client 512 MB of RAM or higher recommended Hard Disk: 30 MB minimum free space (does not include space required for log files) Please refer to Network and Security Manager Installation Guide for platform recommendations. Administrator Supported User Interface: Platform Operating System : list of browsers and Java Environment Windows XP Professional SP3 32 bit: Internet Explorer 7.0, 8.0 (all 32 bit)and Firefox 10; Sun JRE 7 Vista Enterprise SP2 32 bit : Internet Explorer 8.0, 9.0 (all 32 bit)and Firefox 10; Sun JRE 7 Windows 7 SP1 Enterprise 64 bit: Internet Explorer 8.0, 9.0 (all 64 bit) and Firefox 10; Sun JRE 7 Mac Mac OS X 10.6.8, 32 and 64 bit: Safari 5.1 Sun JRE 6 Mac OS X 10.7.3, 32 and 64 bit: Safari 5.1 Sun JRE 6 Linux OpenSuse 11.4, 32 bit only: Firefox 10; Sun JRE 7 Ubuntu 10.04 LTS, 32 bit only: Firefox 10; Sun JRE 7 Juniper Networks, Inc. 3
Software Requirements: IC/MAG Series JUNOS PULSE ACCESS CONTROL SERVICE L3 Enforcer JUNOS PULSE ACCESS CONTROL SERVICE L2 Enforcer IDP JUNOS PULSE ACCESS CONTROL SERVICE 4.2 R1 Qualified with SOS 6.2.0R12, 6.3.0R10 JUNOS Enforcer version 11.2R4.3, 11.4R1.6 J Series Enforcer qualified with JUNOS 10.4R8.5 JUNOS Enforcer version 12.2R1 Qualified with 5.0R3,5.1R2 (Standalone) and Junos version 11.2R4.3, 11.4R1.6 Juniper Networks, Inc. 4
Hardware Requirements: Junos Pulse Access Control Service Appliance Junos Pulse Access Control Service IC4500 Appliance Junos Pulse Access Control Service IC6500 Appliance Junos Pulse Access Control Service IC6500FIPS Appliance Junos Pulse Gateway 2600 Access Control Service Junos Pulse Gateway 4610 Access Control Service MAG 6610 chassis with Junos Pulse Gateway Application Blade 160 Access Control Service MAG 6610 chassis with Junos Pulse Gateway Application Blade 360 Access Control Service MAG 6611 chassis with Junos Pulse Gateway Application Blade 160 Access Control Service MAG 6611 chassis with Junos Pulse Gateway Application Blade 360 Access Control Service Junos Pulse Access Control Service Enforcer SOS Enforcer ISG1000 ISG1000 with IDP Security Module ISG2000 ISG2000 with IDP Security Module NS5200, NS5400 SSG5, SSG20, SSG140 SSG320M, SSG350M, SSG520M, SSG550M SSG5, SSG20 (Wireless) JUNOS Enforcer SRX 100 SRX 110 SRX 210 SRX 220 SRX 240 SRX 650 SRX 1400 SRX 3400 SRX 3600 SRX 5600 SRX 5800 EX 2200 EX 3200 EX 3300 EX 4200 EX 4500 EX 6200 EX 8200 Standalone IDP IDP-75 IDP-250 IDP-800 IDP-8200 Juniper Networks, Inc. 5
Installers and Agents Adaptive Delivery for Juniper client applications In cases where ActiveX is disabled or is not available due to platform or privilege limitations, the client application is installed using Java. This dynamic installation mechanism is known as adaptive delivery. Sun JRE 6 or greater must be installed on the Windows and Linux client system to use adaptive delivery for Juniper client applications. Qualified Platforms with UAC and Junos Pulse Client Platform Operating System : list of browsers and Java Environment Windows XP Professional SP3 32 bit: Internet Explorer 7.0, 8.0 (all 32 bit)and Firefox 10; Sun JRE 7 Vista Enterprise SP2 32 bit : Internet Explorer 8.0, 9.0 (all 32 bit)and Firefox 10; Sun JRE 7 Windows 7 SP1 Enterprise 64 bit: Internet Explorer 8.0, 9.0 (all 64 bit) and Firefox 10; Sun JRE 7 Mac Mac OS X 10.6.8, 32 and 64 bit: Safari 5.1 Sun JRE 6 Mac OS X 10.7.3, 32 and 64 bit: Safari 5.1 Sun JRE 6 Pulse IPSEC and 802.1x are not supported on Mac Compatible Platforms with UAC and Junos Pulse Client Platform Operating System Windows Vista with Service Pack 1 or 2 on 32 bit or 64 bit platforms Windows 7 on 32bit or 64 bit platforms XP Professional SP3 on 32 bit or 64 bit platforms XP Home Edition SP3 Windows 2003 R1 Windows 2008 R2 Mac Mac OS X 10.6, 32 bit and 64 bit Mac OS X 10.5.x, 32 bit and 64 bit Pulse IPSEC and 802.1x are not supported on Mac Browsers and Java Environment Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and above Safari 4.0 and above Juniper Networks, Inc. 6
Qualified Platforms Agentless (Browsers) Platform Operating System : list of browsers and Java Environment Windows XP Professional SP3 32 bit: Internet Explorer 7.0, 8.0 (all 32 bit)and Firefox 10; Sun JRE 7 Vista Enterprise SP2 32 bit : Internet Explorer 8.0, 9.0 (all 32 bit)and Firefox 10; Sun JRE 7 Windows 7 SP1 Enterprise 64 bit: Internet Explorer 8.0, 9.0 (all 64 bit) and Firefox 10; Sun JRE 7 Mac Mac OS X 10.6.8, 32 and 64 bit: Safari 5.1 Sun JRE 6 Mac OS X 10.7.3, 32 and 64 bit: Safari 5.1 Sun JRE 6 Linux OpenSuse 11.4, 32 bit only: Firefox 10; Sun JRE 7 Ubuntu 10.04 LTS, 32 bit only: Firefox 10; Sun JRE 7 Compatible Platforms (Agentless (Browsers) Platform Operating System Windows Vista with Service Pack 1 or 2 on 32 bit or 64 bit platforms Windows 7 on 32bit or 64 bit platforms XP Professional SP3 on 32 bit or 64 bit platforms XP Home Edition SP3 Windows 2003 R1 Windows 2008 R2 Mac Mac OS X 10.6, 32 bit and 64 bit Mac OS X 10.5.x, 32 bit and 64 bit Linux OpenSuse 10.x and 11.x, 32 bit only Ubuntu 9.10, 10.x and 11.x, 32 bit only Red Hat Enterprise Linux 5, 32 bit only Browsers and Java Environment Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and above Safari 4.0 and above Firefox 3.0 and above Solaris Solaris 10, 32 bit only Firefox 10 Mozilla 2.0 and above Juniper Networks, Inc. 7
Qualified Platforms L3 Java Based Persistant Client Platform Operating System : list of browsers and Java Environment Windows XP Professional SP3 32 bit: Internet Explorer 7.0, 8.0 (all 32 bit)and Firefox 10; Sun JRE 7 Mac Mac OS X 10.6.8, 32 and 64 bit: Safari 5.1 Sun JRE 6 Mac OS X 10.7.3, 32 and 64 bit: Safari 5.1 Sun JRE 6 Linux OpenSuse 11.4, 32 bit only: Firefox 10; Sun JRE 7 Ubuntu 10.04 LTS, 32 bit only: Firefox 10; Sun JRE 7 Compatible Platforms (L3 Java Based Persistent Client Platform Operating System Windows Vista with Service Pack 1 or 2 on 32 bit or 64 bit platforms Windows 7 on 32bit or 64 bit platforms XP Professional SP3 on 32 bit or 64 bit platforms XP Home Edition SP3 Windows 2003 R1 Windows 2008 R2 Mac Mac OS X 10.6, 32 bit and 64 bit Mac OS X 10.5.x, 32 bit and 64 bit Linux OpenSuse 10.x and 11.x, 32 bit only Ubuntu 9.10, 10.x and 11.x, 32 bit only Red Hat Enterprise Linux 5, 32 bit only Browsers and Java Environment Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and above Safari 4.0 and above Firefox 3.0 and above Juniper Networks, Inc. 8
Qualified Mobile Devices with Agentless/Browsers Platform Hardware:Operating System : list of browsers Apple ios ipad2 : ios 4.3 : Safari Browser iphone4 : ios 4.3 : Safari Browser Google Android Google Nexus S : Android 2.3.4 : Android Native Browser RIM Blackberry Blackberry Curve 3G 9300:Blackberry OS 6 : Blackberry Native Browser Windows Mobile Windows Mobile 6.5: Internet Explorer Symbian Nokia E72: Symbian OS version 9.3: S60 3rd Edition Feature Pack 2: Symbian Native Browser Compatible Smart Mobile devices with Agentless/Browsers Platform Hardware:Operating System : list of browsers Apple ios ipad or iphone with ios 4.0 or above using Safari Browser Google Android Android smart phones with Android 2.2 or above using Android Native Browser RIM Blackberry Blackberry smart phones with Blackberry OS 6 or above using Native Browser Windows Mobile Windows Mobile smart phones with Windows Mobile 6.5: Internet Explorer Symbian Symbian Devices with Symbian OS version 9.3: S60 3rd Edition Feature Pack 2 or later using Symbian native browser Juniper Networks, Inc. 9
Qualified Platforms (Third-party 802.1x supplicants): Platform Operating System : Third party 802.1x supplicants Windows XP Professional SP3 32 bit: native supplicant for wired and wireless connections Vista Enterprise SP2 32 bit : native supplicant for wired and wireless connections Windows 7 SP1 Enterprise 64 bit: native supplicant for wired and wireless connections Mac Mac OS X 10.6.7, native supplicant Mac OS X 10.7, native supplicant Pulse IPSEC and 802.1x are not supported on Mac Cisco Secure Client 4.0.51.5192 Services Google Android Google Nexus S running Android 2.3.4:native 802.1x supplicant for wifi connections Apple ios ipad2 running ios 4.3: native 802.1x supplicant for wifi connections SOH (System of Health) licenses have been tested with native supplicants Compatible Platforms (Third-party 802.1x supplicants): Platform Operating System Windows Vista with Service Pack 1 or 2 on 32 bit or 64 bit platforms Windows 7 on 32bit or 64 bit platforms XP Professional SP3 64 bit Mac Mac OS X 10.6, 32 bit and 64 bit Mac OS X 10.5.x, 32 bit and 64 bit Pulse IPSEC and 802.1x are not supported on Mac Google Android smart phones running Android 2.2 or later Android Apple ios Apple iphone and ipad running ios 4.0 or later Juniper Networks, Inc. 10
Qualified Juniper 802.1X Devices (Authenticators) Device Juniper EX Series EX 2200, 3200, 3300, 4200, 4500, 6200, 8200 Juniper SRX Series SRX 100 Juniper SRX Series SRX 210, 220, 240, 650 Juniper J Series J2320, J2350, J4350, J6350 Model Firmware Qualified JUNOS 11.2R4.3, 11.4R1.6 JUNOS 11.2R4.3, 11.4R1.6 JUNOS 11.2R4.3, 11.4R1.6 JUNOS 11.2R4.3, 11.4R1.6 Dynamic VLAN RFC 3580 Support Yes No Yes Yes Notes EX Series Switch Software Features Overview document for more details on 802.1x features supported with EX series switches: http://www.juniper.net/us/en/productsservices/switching/ex-series/#products SRX 100 Series Software Features Overview document for more details on 802.1x features supported with SRX 100 series: http://www.juniper.net/us/en/productsservices/security/srx-series/srx100/ SRX Series Software Features Overview document for more details on 802.1x features supported with SRX Series: http://www.juniper.net/us/en/productsservices/security/srx-series/ J Series Software Features Overview document for more details on 802.1x features supported with J Series: http://www.juniper.net/us/en/productsservices/routing/j-series/ Juniper Networks, Inc. 11
3 rd Party 802.1X Devices (Authenticators) Device HP ProCurve 2524 HP ProCurve 2626 HP ProCurve 2810-24G (J9021A) Cisco 2950 Model Firmware Qualified F.05.17, ROM F.02.01 H.08.98, ROM H.08.02 Software: N.10.02 ROM: N.10.01 12.1(22)EA1, c2950-i6q4l2-mz.121-22.ea4.bin 12.2(25)SEB4 7.4e.2.6 rev 4.51S Cisco Catalyst 3750-48TS Extreme200-48 3Com Super Stack 4400 switch Enterasys Matrix 03.07.16.1 Linksys SRW2024 1.0.0.86 Netgear FSM726 2.6.2 (5245) Cisco 1200 12.3(8)JA2 Orinoco AP-600 v2.3.1(554) Proxim Orinoco AP700 v3.1.0(1052) Netgear WG102 V4.0.6NA Linksys WRT54GS 3.37.6 Airespace 1200 2.2.105.2, boot version 1.2.59.6 controlled by Airespace 3504 Switch HP ProCurve 420 2.1.2 Juniper Networks, Inc. 12
Third-party VPN Compatibility with OAC Remote Access VPN Revision Coexistence Nested Tunnel Operation SSLVPN - NC 7.1R5, 7.2R1 Supported Qualified Nortel Client Version - 4_65.320 Nortel Contivity server 1010 version - V05_00.136 Cisco VPN 3000 Concentrator. vpn3005-4.7.2.ik9.bin VPN Client: 4.8.01.0300 Netscreen Server: ScreenOS 5.4 R1 NSCN Client: 8.7 Supported Supported Supported Supported (Not supported when VA is used.) Not supported Not supported Juniper Networks, Inc. 13
Corporate and Sales Headquarters Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA Phone: 888.JUNIPER (888.586.4737) or 408.745.2000 Fax: 408.745.2100 APAC Headquarters Juniper Networks (Hong Kong) 26/F, Cityplaza One 1111 King s Road Taikoo Shing, Hong Kong Phone: 852.2332.3636 Fax: 852.2574.7803 EMEA Headquarters Juniper Networks Ireland Airside Business Park Swords, County Dublin, Ireland Phone: 35.31.8903.600 EMEA Sales: 00800.4586.4737 Fax: 35.31.8903.601 Copyright 2011 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Juniper Networks, Inc. 14