Junos Pulse Access Control Service 4.4R4-MDM Supported Platforms Document Junos Pulse Access Control Service 4.4R4-MDM Build #22687 OAC Version 5.60.22687 Junos Pulse Client Version 4.0.4.38461 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408 745 2000 or 888 JUNIPER www.juniper.net August 2013 Juniper Networks, Inc. 1
Table of Contents Junos Pulse Access Control Service 4.4R4-MDM Supported Platforms Document... 1 MDM Solutions... 3 Network and Security Manager (NSM) Version... 4 Administrator User Interface... 4 Qualified Platforms with Administrator Supported User Interface... 4 Compatible Platforms with Administrator Supported User Interface... 4 Software Requirements... 5 Hardware Requirements... 6 Clients... 7 Qualified Platforms with Junos Pulse Client... 7 Compatible Platforms with Junos Pulse Client... 7 Qualified Platforms with OAC... 8 Compatible Platforms with OAC... 8 Qualified Platforms Agentless (Browsers)... 8 Compatible Platforms Agentless (Browsers)... 9 Qualified Platforms ( L3 Java Based Persistent Client)... 9 Compatible Platforms (L3 Java Based Persistent Client)... 9 Qualified Mobile Devices with Native Supplicant for Device On boarding and Posture Assessment... 10 Qualified Mobile Devices with Agentless/Browsers for L3 access... 10 Compatible Smart Mobile devices with Agentless/Browsers... 10 Qualified Platforms (Third-party 802.1x supplicants)... 11 Compatible Platforms (Third-party 802.1x supplicants)... 11 Qualified Juniper 802.1X Devices (Authenticators)... 12 Third Party 802.1X Devices (Authenticators)... 13 Third-Party VPN Compatibility with OAC... 14 Juniper Networks, Inc. 2
Disclaimer This document describes the devices and platforms including operating system/browser combinations that have been qualified for use with the Junos Pulse Access Control Service Agent and IC/MAG Series Junos Pulse Access Control Service Appliance. Juniper Networks tests the mentioned functionalities on most widely used corporate and consumer platforms to qualify each platform as either qualified or compatible. The platforms in this list are divided into two categories: compatible and qualified. The complete list of platforms/browsers in the document is supported. If problems are encountered on either a qualified or a compatible platform then Juniper support will attempt to resolve the issue. Windows XP: Refers to Windows XP Professional/Home Edition Windows Vista or Vista refers to Windows Vista Enterprise/Ultimate/Business/Home Basic/Home Premium Windows 7: Refers to Windows 7 Enterprise/Ultimate/Professional/Home Basic/Home Premium Windows 8: Refers to Windows 8 normal-edition/pro/enterprise/windows RT All of the information is valid on the date when the document was published. This applies to the comment for 'and above' versions stated in this document as well. Qualified Platform The platforms listed in the qualified category have been systematically tested by QA department as part of the release covered by the Supported Platforms document. Compatible Platform The platforms listed in the compatible category have not been systematically tested by our QA department in this release but based on testing in previous releases and knowledge of the platform Juniper expects that the functionality will work and will fully support these platforms. For all newer versions of browsers and operating systems please contact Juniper Support. MDM Solutions AirWatch Qualified Compatible Cloud service 6.4.1.2 Appliance OS Virtual appliance OS Yes Yes MobileIron Qualified Compatible Cloud service VSP 5.7.0 Build 376 Appliance OS Virtual appliance OS Yes Yes Juniper Networks, Inc. 3
Network and Security Manager (NSM) Version Junos Pulse Access Control Service 4.4 R4-MDM Qualified with 2010.3s9 and 2012.1R3 Junos Pulse Access Control Service Agent Minimum Requirements for Windows Platforms (Pulse and OAC) CPU: 500MHz or above recommended for Windows Client 512 MB of RAM or higher recommended Hard Disk: 30 MB minimum free space (does not include space required for log files) Please refer to Network and Security Manager Installation Guide for platform recommendations. Administrator User Interface Qualified Platforms with Administrator Supported User Interface Platform Operating System Browsers and Java Environment Windows Windows 7 SP1 Enterprise, 64 bit Internet Explorer 10 Windows 8, 64-bit Internet Explorer 9 Firefox ESR Oracle JRE 7 Compatible Platforms with Administrator Supported User Interface Platform Operating System Browsers and Java Environment Windows Windows 8, 32bit Windows 7, 32-bit or 64-bit platforms Windows 7 SP1 Enterprise, 32-bit Windows Vista, 32-bit or 64-bit platforms Windows XP with SP3, 32 bit Mac Mac OSX 10.6.8, 32 bit and 64 bit Mac OSX 10.7.3, 32 bit Mac OSX 10.8, 32 bit Mac OSX 10.7.4, 64 bit Mac OSX 10.8, 64 bit Internet Explorer 9.0 Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and above Oracle JRE 6 and above Safari 5.2 Oracle JRE 6 Safari 5.1 Oracle JRE 6 Safari 5.0 Oracle JRE 6 Safari 6.0 Juniper Networks, Inc. 4
Software Requirements IC/MAG Series Junos Pulse Access Control Service L3 Enforcer Junos Pulse Access Control Service L2 Enforcer IDP Junos Pulse Access Control Service 4.4 R4-MDM Qualified with SOS 6.2.0R15, 6.3.0R12 Junos Enforcer version 12.1X44-D2.3, 12.1R4.7 J Series Enforcer qualified with JUNOS 10.4R12.1 Junos Enforcer version 12.2R2 Qualified with 5.0R3,5.1R3 (Standalone) and Junos version 12.1X44-D2.3, 12.1R4.7 Juniper Networks, Inc. 5
Hardware Requirements Junos Pulse Access Control Service Appliance Junos Pulse Access Control Service IC4500 Appliance Junos Pulse Access Control Service IC6500 Appliance Junos Pulse Access Control Service IC6500 FIPS Appliance Junos Pulse Gateway 2600 Access Control Service Junos Pulse Gateway 4610 Access Control Service MAG 6610 chassis with Junos Pulse Gateway Application Blade 160 Access Control Service MAG 6610 chassis with Junos Pulse Gateway Application Blade 360 Access Control Service MAG 6611 chassis with Junos Pulse Gateway Application Blade 160 Access Control Service MAG 6611 chassis with Junos Pulse Gateway Application Blade 360 Access Control Service Junos Pulse Access Control Service Enforcer SOS Enforcer ISG1000 ISG1000 with IDP Security Module ISG2000 ISG2000 with IDP Security Module NS5200, NS5400 SSG5, SSG20, SSG140 SSG320M, SSG350M, SSG520M, SSG550M SSG5, SSG20 (Wireless) JUNOS Enforcer SRX 100 SRX 110 SRX 210 SRX 220 SRX 240 SRX 650 SRX 1400 SRX 3400 SRX 3600 SRX 5600 SRX 5800 EX 2200 EX 2500 EX 3200 EX 3300 EX 4200 EX 4500 EX 6200 EX 8200 Standalone IDP IDP-75 IDP-250 IDP-800 IDP-8200 Juniper Networks, Inc. 6
Installers and Agents -- Adaptive Delivery for Juniper client applications In cases where ActiveX is disabled or is not available due to platform or privilege limitations, the client application is installed using Java. This dynamic installation mechanism is known as adaptive delivery. Oracle JRE 6 or greater must be installed on the Windows and Linux client system to use adaptive delivery for Juniper client applications. Clients Qualified Platforms with Junos Pulse Client Platform Operating System Browsers and Java Environment Windows Windows 7 SP1 Enterprise, 64 bit Windows 8, 64 bit Mac Mac OSX 10.7.4, 64 bit Mac OSX 10.8, 64 bit Pulse IPSEC and 802.1x are not supported on Mac Internet Explorer 10 Internet Explorer 9 Firefox ESR Oracle JRE 7 Safari 5.2 Safari 6.0 Oracle JRE 7 Compatible Platforms with Junos Pulse Client Platform Operating System Browsers and Java Environment Windows Windows 8, 32bit Windows 7, 32-bit or 64-bit platforms Windows 7 SP1 Enterprise, 32-bit Windows Vista, 32-bit or 64-bit platforms Windows XP with SP3, 32 bit Mac Mac OSX 10.6.8, 32 bit and 64 bit Mac OSX 10.7.3, 32 bit Mac OSX 10.8, 32 bit Pulse IPSEC and 802.1x are not supported on Mac Internet Explorer 9.0 Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and above Oracle JRE 6 and above Safari 5.2 Oracle JRE 6 Safari 5.1 Oracle JRE 6 Safari 5.0 Oracle JRE 6 Juniper Networks, Inc. 7
Qualified Platforms with OAC Platform Operating System Browsers and Java Environment Windows Windows 7 SP1 Enterprise, 64 bit Internet Explorer 10 Windows 8, 64 bit Internet Explorer 9 Firefox ESR Oracle JRE 7 Compatible Platforms with OAC Platform Operating System Browsers and Java Environment Windows Windows 8, 32bit Internet Explorer 9.0 Windows 7, 32-bit or 64-bit platforms Internet Explorer 8.0 Windows 7 SP1 Enterprise, 32-bit Internet Explorer 7.0 Windows Vista, 32-bit or 64-bit platforms Firefox 3.0 and above Windows XP with SP3, 32 bit Oracle JRE 6 and above Qualified Platforms Agentless (Browsers) Platform Operating System Browsers and Java Environment Windows Windows 7 SP1 Enterprise, 64 bit Internet Explorer 10 Windows 8, 64 bit Internet Explorer 9 Firefox ESR Oracle JRE 7 Mac Mac OS X 10.7.3, 64 bit Safari 5.2 Mac OS X 10.8, 64 bit Safari 6.0 Oracle JRE 7 Linux Ubuntu 12.04 LTS Firefox ESR OpenSuse 12.1 Oracle JRE 7 Solaris ** Solaris 10, 32 bit Mozilla 2.0 and above Juniper Networks, Inc. 8
Compatible Platforms Agentless (Browsers) Platform Operating System Browsers and Java Environment Windows Windows 8, 32bit Windows 7 Ultimate/Professional/Home Basic/Home Premium, 32-bit or 64-bit platforms Windows 7 SP1 Enterprise, 32-bit Windows Vista Ultimate/Business/Home- Basic/Home-Premium with Service Pack 2, 32-bit or 64-bit platforms XP Home with SP3, 32 bit only Mac Mac OSX 10.6.8, 32 bit and 64 bit Mac OSX 10.7.3, 32 bit Mac OSX 10.8, 32 bit Linux OpenSuse 10.x and 11.x Ubuntu 9.10, 10.x, and 11.x Red Hat Enterprise Linux 5 Internet Explorer 9.0 Internet Explorer 8.0 Internet Explorer 7.0 Firefox 3.0 and above Oracle JRE 6 and above Safari 5.2 Sun JRE 6 Safari 5.1 Sun JRE 6 Safari 5.0 Sun JRE 6 Firefox 3.0 and above Oracle JRE 6 and above Solaris * Solaris 10, 32 bit Mozilla 2.0 and above Qualified Platforms ( L3 Java Based Persistent Client) Platform Operating System : List of browsers and Java Environment Linux OpenSuse 11.4, 32 bit Ubuntu 10.04 LTS, 32 bit Browsers and Java Environment Firefox ESR Oracle JRE 7 Compatible Platforms (L3 Java Based Persistent Client) Platform Operating System Browsers and Java Environment Linux OpenSuse 10.x and 11.x Ubuntu 9.10, 10.x, and 11.x Red Hat Enterprise Linux 5 Firefox 3.0 and above Oracle JRE 6 and above Juniper Networks, Inc. 9
Qualified Mobile Devices with Native Supplicant for Device On boarding and Posture Assessment Platform Hardware: Operating System : List of browsers Apple ios ios 6.1 ios 5.0 Google Android 4.1, 4.2 Windows Mobile Windows Mobile 8 Qualified Mobile Devices with Agentless/Browsers for L3 access Platform Hardware: Operating System : List of browsers Apple ios ios 6.1: Safari Browser ios 5.0: Safari Browser Google Android 4.1, 4.2 : Android Native Browser RIM Blackberry 10: Blackberry Native Browser Windows Mobile Windows Mobile 8: Internet Explorer Compatible Smart Mobile devices with Agentless/Browsers Platform Hardware: Operating System : List of browsers Apple ios ipad or iphone with ios 4.0 or above using Safari Browser Google Android Android smart phones with Android 2.2 or above using Android Native Browser RIM Blackberry Blackberry smart phones with Blackberry OS 6 or above using Native Browser Windows Mobile Windows Mobile smart phones with Windows Mobile 6.5: Internet Explorer Symbian Symbian Devices with Symbian OS version 9.3: S60 3rd Edition Feature Pack 2 or later using Symbian native browser Juniper Networks, Inc. 10
Qualified Platforms (Third-party 802.1x supplicants) Platform Operating System : Third party 802.1x supplicants Windows Windows 7 SP1 Enterprise, 64 bit Windows 8, 64 bit Mac Mac OS X 10.7.3, 64 bit Cisco Secure Services Mac OS X 10.8 64 bit Client 4.0.51.5192 Google Android Google Nexus S running Android 2.3.4:native 802.1x supplicant for wifi connections Apple ios ipad2 running ios 4.3: native 802.1x supplicant for wifi connections Windows SOH (System of Health) licenses have been tested with native supplicants Compatible Platforms (Third-party 802.1x supplicants) Platform Operating System Windows Windows 8, 32bit Windows 7 Ultimate/Professional/Home Basic/Home Premium, 32-bit or 64-bit platforms Windows 7 SP1 Enterprise, 32-bit Windows Vista Ultimate/Business/Home-Basic/Home-Premium with Service Pack 2, 32-bit or 64-bit platforms XP Home with SP3, 32-bit Mac Mac OS X 10.6.8, 32 bit and 64 bit Mac OS X 10.7.3, 32 bit Mac OS X 10.8, 32 bit Google Android Android smart phones running Android 2.2 or later Apple ios Apple iphone and ipad running ios 4.0 or later Juniper Networks, Inc. 11
Qualified Juniper 802.1X Devices (Authenticators) Device Juniper EX Series EX 2200, 3200, 3300, 4200, 4500, 6200, 8200 Juniper SRX Series SRX 100 Juniper SRX Series SRX 210, 220, 240, 650 Juniper J Series J2320, J2350, J4350, J6350 Model Firmware Qualified JUNOS 12.1R4.7, 12.2R2.4 JUNOS 12.1X44- D2.3, 12.1R4.7 JUNOS 12.1X44- D2.3, 12.1R4.7 JUNOS 12.1X44- D2.3, 12.1R4.7 Dynamic VLAN RFC 3580 Support Yes No Yes Yes Notes EX Series Switch Software Features Overview document for more details on 802.1x features supported with EX series switches: http://www.juniper.net/us/en/productsservices/switching/ex-series/#products SRX 100 Series Software Features Overview document for more details on 802.1x features supported with SRX 100 series: http://www.juniper.net/us/en/productsservices/security/srx-series/srx100/ SRX Series Software Features Overview document for more details on 802.1x features supported with SRX Series: http://www.juniper.net/us/en/productsservices/security/srx-series/ J Series Software Features Overview document for more details on 802.1x features supported with J Series: http://www.juniper.net/us/en/productsservices/routing/j-series/ Juniper Networks, Inc. 12
Third Party 802.1X Devices (Authenticators) Device HP ProCurve 2524 HP ProCurve 2626 HP ProCurve 2810-24G (J9021A) Cisco 2950 Cisco Catalyst 3750-48TS Extreme200-48 3Com Super Stack 4400 switch Model Firmware Qualified F.05.17, ROM F.02.01 H.08.98, ROM H.08.02 Software: N.10.02 ROM: N.10.01 12.1(22)EA1, c2950-i6q4l2-mz.121-22.ea4.bin 12.2(25)SEB4 7.4e.2.6 rev 4.51S Enterasys Matrix 03.07.16.1 Linksys SRW2024 1.0.0.86 Netgear FSM726 2.6.2 (5245) Cisco 1200 Orinoco AP-600 Proxim Orinoco AP700 Netgear WG102 12.3(8)JA2 v2.3.1(554) v3.1.0(1052) V4.0.6NA Linksys WRT54GS 3.37.6 Airespace 1200 controlled by Airespace 3504 Switch HP ProCurve 420 2.1.2 2.2.105.2, boot version 1.2.59.6 Juniper Networks, Inc. 13
Third-Party VPN Compatibility with OAC Remote Access VPN Revision Coexistence Nested Tunnel Operation SSLVPN - NC 7.3R2, 7.4R3 Supported Qualified Nortel Cisco Netscreen Client Version - 4_65.320 Nortel Contivity server 1010 version - V05_00.136 VPN 3000 Concentrator. vpn3005-4.7.2.i-k9.bin VPN Client: 4.8.01.0300 Server: ScreenOS 5.4 R1 NSCN Client: 8.7 Supported Supported Supported Supported (Not supported when VA is used.) Not supported Not supported Corporate and Sales Headquarters Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA Phone: 888.JUNIPER (888.586.4737) or 408.745.2000 Fax: 408.745.2100 APAC Headquarters Juniper Networks (Hong Kong) 26/F, Cityplaza One 1111 King s Road Taikoo Shing, Hong Kong Phone: 852.2332.3636 Fax: 852.2574.7803 EMEA Headquarters Juniper Networks Ireland Airside Business Park Swords, County Dublin, Ireland Phone: 35.31.8903.600 EMEA Sales: 00800.4586.4737 Fax: 35.31.8903.601 Copyright 2011 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Juniper Networks, Inc. 14