SRX

Is there a compatability matrix for Junos on SRX & PulseSecure Desktop versions?

I have a assortment of SRX (100, 210, 240) doing dynamic vpn on 12.1X44-D40.2 with PulseSecure Desktop 5.1.6 (OS X & Windows 10) that work.

I tried upgrading a SRX100 to 12.1X46-D40.2 and the VPN client wouldn't connect showing HTTP unreachable (Windows 10) or bad configuration (OS X) errors. After downgrading to 12.1X44-D40.2 it started to work (no config changes on the SRX besides downgrading Junos).

With a known SSL public+private key loaded I was able to watch the VPN client try to connect in Wireshark. It looks like it was fetching /dynamic-vpn/, being sent a 301 redirect to /dynamic-vpn/index.php, and then landing on a 404 error page all before reaching the username+password prompt stage.

Hi,

Try to get the latest version https://www.juniper.net/support/downloads/?p=pulse#sw. This version will be working with the later 12.1Xxx junos versions. You could also get the version that is shipped with the junos you installed on the srx. Just go to the url http://ip-of-srx/dynamic-vpn and you will be prompted to download the version that is shipped with the 12.1X46 junos release

Hope this helps a bit

Have a look here:

http://forums.juniper.net/t5/SRX-Services-Gateway/SRX-Dynamic-VPN-Issue/td-p/285453

Long answer short:

Downgrade to 12.1X46-D35 due to PR1135780:

https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1135780.