Junos Pulse Access Control Service 4.4R4-MDM Supported Platforms Document

(1)

Junos Pulse Access Control Service 4.4R4-MDM Build #22687 OAC Version 5.60.22687

Junos Pulse Client Version 4.0.4.38461

Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408 745 2000 or 888 JUNIPER www.juniper.net

(2)

Table of Contents

Junos Pulse Access Control Service 4.4R4-MDM Supported Platforms Document ... 1

MDM Solutions ... 3

Network and Security Manager (NSM) Version ... 4

Administrator User Interface ... 4

Qualified Platforms with Administrator Supported User Interface ... 4

Compatible Platforms with Administrator Supported User Interface ... 4

Software Requirements ... 5

Hardware Requirements ... 6

Clients ... 7

Qualified Platforms with Junos Pulse Client ... 7

Compatible Platforms with Junos Pulse Client ... 7

Qualified Platforms with OAC ... 8

Compatible Platforms with OAC ... 8

Qualified Platforms Agentless (Browsers) ... 8

Compatible Platforms Agentless (Browsers) ... 9

Qualified Platforms ( L3 Java Based Persistent Client) ... 9

Compatible Platforms (L3 Java Based Persistent Client) ... 9

Qualified Mobile Devices with Native Supplicant for Device On boarding and Posture Assessment ... 10

Qualified Mobile Devices with Agentless/Browsers for L3 access ... 10

Compatible Smart Mobile devices with Agentless/Browsers ... 10

Qualified Platforms (Third-party 802.1x supplicants) ... 11

Compatible Platforms (Third-party 802.1x supplicants) ... 11

Qualified Juniper 802.1X Devices (Authenticators) ... 12

Third Party 802.1X Devices (Authenticators) ... 13

(3)

Disclaimer

This document describes the devices and platforms including operating system/browser combinations that have been qualified for use with the Junos Pulse Access Control Service Agent and IC/MAG Series Junos Pulse Access Control Service Appliance.

Juniper Networks tests the mentioned functionalities on most widely used corporate and consumer platforms to qualify each platform as either qualified or compatible.

The platforms in this list are divided into two categories: compatible and qualified. The complete list of platforms/browsers in the document is supported. If problems are encountered on either a qualified or a compatible platform then Juniper support will attempt to resolve the issue.

Windows XP: Refers to Windows XP Professional/Home Edition

Windows Vista or Vista refers to Windows Vista Enterprise/Ultimate/Business/Home Basic/Home Premium Windows 7: Refers to Windows 7 Enterprise/Ultimate/Professional/Home Basic/Home Premium

Windows 8: Refers to Windows 8 normal-edition/Pro/Enterprise/Windows RT

All of the information is valid on the date when the document was published. This applies to the comment for 'and above' versions stated in this document as well.

Qualified Platform

The platforms listed in the “qualified” category have been systematically tested by QA department as part of the release covered by the Supported Platforms document.

Compatible Platform

The platforms listed in the “compatible” category have not been systematically tested by our QA department in this release but based on testing in previous releases and knowledge of the platform Juniper expects that the

functionality will work and will fully support these platforms.

For all newer versions of browsers and operating systems please contact Juniper Support. MDM Solutions

AirWatch Qualified Compatible

Cloud service 6.4.1.2

Appliance OS Yes

Virtual appliance OS Yes

MobileIron Qualified Compatible

Cloud service _{VSP 5.7.0 Build 376}

Appliance OS Yes

(4)

Network and Security Manager (NSM) Version

 Junos Pulse Access Control Service 4.4 R4-MDM Qualified with 2010.3s9 and 2012.1R3

 Junos Pulse Access Control Service Agent Minimum Requirements for Windows Platforms (Pulse and OAC)  CPU: 500MHz or above recommended for Windows Client

 512 MB of RAM or higher recommended

 Hard Disk: 30 MB minimum free space (does not include space required for log files)

 Please refer to “Network and Security Manager Installation Guide” for platform recommendations.

Administrator User Interface

Qualified Platforms with Administrator Supported User Interface

Platform Operating System Browsers and Java Environment Windows  Windows 7 SP1 Enterprise, 64 bit

 Windows 8, 64-bit  Internet Explorer 10  Internet Explorer 9  Firefox ESR  Oracle JRE 7

Compatible Platforms with Administrator Supported User Interface

Platform Operating System Browsers and Java Environment

Windows  Windows 8, 32bit

 Windows 7, 32-bit or 64-bit platforms

 Windows 7 SP1 Enterprise, 32-bit

 Windows Vista, 32-bit or 64-bit platforms

 Windows XP with SP3, 32 bit

 Internet Explorer 9.0

 Firefox 3.0 and above

 Oracle JRE 6 and above Mac

 Mac OSX 10.6.8, 32 bit and 64 bit

 Mac OSX 10.7.3, 32 bit

 Mac OSX 10.8, 32 bit

 Mac OSX 10.7.4, 64 bit

 Safari 5.2 Oracle JRE 6

(5)

Software Requirements

IC/MAG Series Junos Pulse Access Control Service L3 Enforcer Junos Pulse Access Control Service L2 Enforcer IDP

Junos Pulse Access Control Service 4.4 R4-MDM

Qualified with SOS 6.2.0R15, 6.3.0R12 Junos Enforcer version 12.1X44-D2.3, 12.1R4.7 J Series Enforcer qualified with JUNOS

10.4R12.1

Junos Enforcer version 12.2R2

Qualified with 5.0R3,5.1R3 (Standalone) and Junos version 12.1X44-D2.3, 12.1R4.7

(6)

Hardware Requirements

Junos Pulse Access Control

Service Appliance Junos Pulse Access Control Service Enforcer Standalone IDP Junos Pulse Access Control Service

IC4500 Appliance

Junos Pulse Access Control Service IC6500 Appliance

Junos Pulse Access Control Service IC6500 FIPS Appliance

Junos Pulse Gateway 2600 Access Control Service

Junos Pulse Gateway 4610 Access Control Service

MAG 6610 chassis with Junos Pulse Gateway Application Blade 160 Access Control Service

SOS Enforcer ISG1000

ISG1000 with IDP Security Module ISG2000

ISG2000 with IDP Security Module NS5200, NS5400 SSG5, SSG20, SSG140 SSG320M, SSG350M, SSG520M, SSG550M SSG5, SSG20 (Wireless) JUNOS Enforcer SRX 100 SRX 110 SRX 210 SRX 220 SRX 240 SRX 650 SRX 1400 SRX 3400 SRX 3600 SRX 5600 SRX 5800 EX 2200 EX 2500 EX 3200 EX 3300 EX 4200 EX 4500 EX 6200 EX 8200 IDP-75 IDP-250 IDP-800 IDP-8200

(7)

Installers and Agents -- Adaptive Delivery for Juniper client applications

In cases where ActiveX is disabled or is not available due to platform or privilege limitations, the client application is installed using Java. This dynamic installation mechanism is known as adaptive delivery.

Oracle JRE 6 or greater must be installed on the Windows and Linux client system to use adaptive delivery for Juniper client applications.

Clients

Qualified Platforms with Junos Pulse Client

Windows  Windows 7 SP1 Enterprise, 64 bit

 Windows 8, 64 bit  Internet Explorer 10  Internet Explorer 9  Firefox ESR  Oracle JRE 7 Mac

 Mac OSX 10.7.4, 64 bit

 Pulse IPSEC and 802.1x are not supported on Mac

 Safari 5.2

 Safari 6.0

 Oracle JRE 7

Compatible Platforms with Junos Pulse Client

 Oracle JRE 6 and above Mac

 Mac OSX 10.7.3, 32 bit

 Pulse IPSEC and 802.1x are not supported on Mac

(8)

Qualified Platforms with OAC

 Windows 8, 64 bit  Internet Explorer 10  Internet Explorer 9  Firefox ESR  Oracle JRE 7

Compatible Platforms with OAC

 Oracle JRE 6 and above

Qualified Platforms Agentless (Browsers)

 Windows 8, 64 bit  Internet Explorer 10  Internet Explorer 9  Firefox ESR  Oracle JRE 7 Mac  Mac OS X 10.7.3, 64 bit  Mac OS X 10.8, 64 bit  Safari 5.2  Safari 6.0  Oracle JRE 7 Linux  Ubuntu 12.04 LTS  OpenSuse 12.1  Firefox ESR  Oracle JRE 7

(9)

Compatible Platforms Agentless (Browsers)

Platform Operating System Browsers and Java

Environment Windows  Windows 8, 32bit

 Windows 7 Ultimate/Professional/Home

Basic/Home Premium, 32-bit or 64-bit platforms

 Windows Vista

Ultimate/Business/Home-Basic/Home-Premium with Service Pack 2, 32-bit or 64-bit platforms

 XP Home with SP3, 32 bit only

Mac

 Mac OSX 10.7.3, 32 bit

 Safari 5.2 Sun JRE 6

 Safari 5.1 Sun JRE 6

 Safari 5.0 Sun JRE 6 Linux

 OpenSuse 10.x and 11.x

 Ubuntu 9.10, 10.x, and 11.x

 Red Hat Enterprise Linux 5

Solaris *  Solaris 10, 32 bit  Mozilla 2.0 and above

Qualified Platforms ( L3 Java Based Persistent Client)

Platform Operating System : List of browsers and Java

Environment Browsers and Java Environment Linux  OpenSuse 11.4, 32 bit  Ubuntu 10.04 LTS, 32 bit  Firefox ESR  Oracle JRE 7

Compatible Platforms (L3 Java Based Persistent Client)

Platform Operating System Browsers and Java

Environment Linux

 OpenSuse 10.x and 11.x

 Ubuntu 9.10, 10.x, and 11.x

 Red Hat Enterprise Linux 5

(10)

Qualified Mobile Devices with Native Supplicant for Device On boarding and Posture Assessment

Platform Hardware: Operating System : List of browsers

Apple iOS  iOS 6.1

 iOS 5.0 Google Android  4.1, 4.2

Windows Mobile  Windows Mobile 8

Qualified Mobile Devices with Agentless/Browsers for L3 access

Platform Hardware: Operating System : List of browsers Apple iOS  iOS 6.1: Safari Browser

 iOS 5.0: Safari Browser

Google Android  4.1, 4.2 : Android Native Browser RIM Blackberry  10: Blackberry Native Browser Windows Mobile  Windows Mobile 8: Internet Explorer

Compatible Smart Mobile devices with Agentless/Browsers

Platform Hardware: Operating System : List of browsers

Apple iOS  iPad or iPhone with iOS 4.0 or above using Safari Browser

Google Android  Android smart phones with Android 2.2 or above using Android Native Browser

RIM Blackberry  Blackberry smart phones with Blackberry OS 6 or above using Native Browser Windows Mobile  Windows Mobile smart phones with Windows Mobile 6.5: Internet Explorer Symbian  Symbian Devices with Symbian OS version 9.3: S60 3rd Edition Feature Pack 2

(11)

Qualified Platforms (Third-party 802.1x supplicants)

Platform Operating System : Third party 802.1x supplicants Windows  Windows 7 SP1 Enterprise, 64 bit

 Windows 8, 64 bit Mac  Mac OS X 10.7.3, 64 bit  Mac OS X 10.8 64 bit Cisco Secure Services  Client 4.0.51.5192

Google Android  Google Nexus S running Android 2.3.4:native 802.1x supplicant for wifi connections

Apple iOS  iPad2 running iOS 4.3: native 802.1x supplicant for wifi connections Windows  SOH (System of Health) licenses have been tested with native supplicants

Compatible Platforms (Third-party 802.1x supplicants)

Platform Operating System Windows  Windows 8, 32bit

 Windows 7 Ultimate/Professional/Home Basic/Home Premium, 32-bit or 64-bit platforms

 Windows Vista Ultimate/Business/Home-Basic/Home-Premium with Service Pack 2 , 32-bit or 64-bit platforms

 XP Home with SP3, 32-bit Mac

 Mac OS X 10.6.8, 32 bit and 64 bit

 Mac OS X 10.7.3, 32 bit

 Mac OS X 10.8, 32 bit

Google Android  Android smart phones running Android 2.2 or later Apple iOS  Apple iPhone and iPad running iOS 4.0 or later

(12)

Qualified Juniper 802.1X Devices (Authenticators)

Device Model Firmware _Qualified Dynamic VLAN RFC 3580 Support Notes Juniper EX Series EX 2200, 3200, 3300, 4200, 4500, 6200, 8200 JUNOS 12.1R4.7, 12.2R2.4

Yes EX Series Switch Software Features Overview” document for more details on 802.1x features supported with EX series switches:

http://www.juniper.net/us/en/products-services/switching/ex-series/#products Juniper SRX Series SRX 100 JUNOS 12.1X44-D2.3, 12.1R4.7

No SRX 100 Series Software Features Overview” document for more details on 802.1x features supported with SRX 100 series:

http://www.juniper.net/us/en/products-services/security/srx-series/srx100/ Juniper SRX Series SRX 210, 220, 240, 650 JUNOS 12.1X44-D2.3, 12.1R4.7

Yes SRX Series Software Features Overview” document for more details on 802.1x features supported with SRX Series:

http://www.juniper.net/us/en/products-services/security/srx-series/ Juniper J Series J2320, J2350, J4350, J6350 JUNOS 12.1X44-D2.3, 12.1R4.7

Yes J Series Software Features Overview”

document for more details on 802.1x features supported with J Series:

http://www.juniper.net/us/en/products-services/routing/j-series/

(13)

Third Party 802.1X Devices (Authenticators)

Device Model Firmware Qualified

HP ProCurve 2524 F.05.17, ROM F.02.01

HP ProCurve 2626 H.08.98, ROM H.08.02

HP ProCurve 2810-24G

(J9021A) Software: N.10.02 ROM: N.10.01

Cisco 2950 12.1(22)EA1,

c2950-i6q4l2-mz.121-22.EA4.bin Cisco Catalyst 3750-48TS 12.2(25)SEB4

Extreme200-48 7.4e.2.6

3Com Super Stack 4400

switch rev 4.51S Enterasys Matrix 03.07.16.1 Linksys SRW2024 1.0.0.86 Netgear FSM726 2.6.2 (5245) Cisco 1200 12.3(8)JA2 Orinoco AP-600 v2.3.1(554)

Proxim Orinoco AP700 v3.1.0(1052)

Netgear WG102 V4.0.6NA Linksys WRT54GS 3.37.6 Airespace 1200 controlled by Airespace 3504 Switch 2.2.105.2 , boot version 1.2.59.6 HP ProCurve 420 2.1.2

(14)

Corporate and Sales Headquarters Juniper Networks, Inc.

1194 North Mathilda Avenue Sunnyvale, CA 94089 USA

Phone: 888.JUNIPER (888.586.4737) or 408.745.2000

Fax: 408.745.2100

APAC Headquarters Juniper Networks (Hong Kong) 26/F, Cityplaza One

1111 King’s Road Taikoo Shing, Hong Kong Phone: 852.2332.3636 Fax: 852.2574.7803

EMEA Headquarters Juniper Networks Ireland Airside Business Park Swords, County Dublin, Ireland Phone: 35.31.8903.600 EMEA Sales: 00800.4586.4737 Fax: 35.31.8903.601

Copyright 2011 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

Third-Party VPN Compatibility with OAC

Remote Access VPN Revision Coexistence Nested Tunnel Operation

SSLVPN - NC 7.3R2, 7.4R3 Supported Qualified

Nortel Client Version - 4_65.320 Nortel Contivity server 1010 version - V05_00.136

Supported Supported

(Not supported when VA is used.)

Cisco VPN 3000 Concentrator. vpn3005-4.7.2.I-k9.bin VPN Client: 4.8.01.0300

Supported Not supported

Netscreen Server: ScreenOS 5.4 R1 NSCN Client: 8.7