4.
Setthesystemtimeusingoneofthesemethods:
UseNTPserver—SelecttheUseNTPServeroption,entertheserver’sIPaddress
orname,andspecifyanupdateinterval.
SetTimeManually—SelecttheSetTimeManuallyoptionandentervaluesforthe
dateandtime.YoucanalsoclickGetfromBrowsertopopulatetheDateandTime
fields.
5.
ClickSaveChanges.
Related
Documentation
ConfiguringLogMonitoringFeaturesonpage809
MonitoringActiveUsers
YoucanmonitoruserssignedintotheSASeriesAppliance.Eachuser’sname,
authenticationrealm,role,andsign-intimearelistedontheActiveUserspage.
NOTE: Non-SASeriesuserswhoaresignedintoasecuremeetingarelisted
asmembersofthe“SecureMeetingUserRole”role.TheSASeriesAppliance
displays“N/A”intheRealmandRolecolumnsfornon-SASeriesuserswho
aresignedintotheSASeriesAppliancetoattendaSecureMeeting.
TomonitoruserssignedintotheSASeriesAppliance:
1.
Intheadminconsole,chooseSystem>Status>ActiveUsers.
2.
Performthesetasks(optional):
SignusersoutoftheirSASeriesAppliancesessions:
Toforciblysignoutoneormoreend-usersoradministrators,selectthecheckbox
nexttotheappropriatenamesandthenclickDeleteSession.
Toforciblysignoutallend-userswhoarecurrentlysigned-in,clickDeleteAll
Sessions.
Performadynamicpolicyevaluationofallsigned-inusers:
Tomanuallyevaluateallauthenticationpolicies,rolemappingrules,role
restrictions,userroles,andresourcepoliciesforallcurrentlysigned-inusers,click
RefreshRoles.Usethisbuttonifyoumakechangestoanauthenticationpolicy,
rolemappingrules,rolerestrictions,orresourcepoliciesandyouwantto
immediatelyrefreshtherolesofallusers.
Configurewhichdataisshownanditsorder:
825
Copyright©2012,JuniperNetworks,Inc.
Chapter31:LoggingandMonitoring
Change pdf page size - Compress reduce PDF size in C#.net, ASP.NET, MVC, Ajax, WinForms, WPF
C# Code & .NET API to Compress & Decompress PDF Document
change font size in fillable pdf form; best compression pdf
Change pdf page size - VB.NET PDF File Compress Library: Compress reduce PDF size in vb.net, ASP.NET, MVC, Ajax, WinForms, WPF
VB.NET PDF Document Compression and Decompression Control SDK
pdf file size; pdf custom paper size
Todisplayaspecificuser,entertheusernameintheShowUsersNamedfieldand
clickUpdate.Ifyoudonotknowtheuser’sexactusername,usethe*wildcard
character.Forexample,ifyouhaveausernamed“JosephJones,”butyoudonot
rememberiftheusernameis“Joe”or“Joseph,”enterJo*intheShowUsersNamed
field.TheSASeriesAppliancereturnsalistofalluserswhoseusernamesstart
withthelettersjo.
TocontrolhowmanyusersandadministratorsaredisplayedintheActiveUsers
page,enteranumberintheShowNusersfieldandclickUpdate.
Tosortthetableofcurrentlysigned-inusersandadministrators,clickacolumn
header
Torefreshthepage’scontent,clickUpdate.
Linktorelatedtabs:
Toeditauser’sauthenticationrealm,clicktheRealmlinknexttothename.
Toeditauser’srole,clicktheRolelinknexttothename.
Related
Documentation
UserRolesOverviewonpage93
AuthenticationRealmOverviewonpage227
ViewingandCancellingScheduledMeetings
YoucanviewallofthemeetingscurrentlyscheduledontheSASeriesApplianceorcancel
meetings.
Copyright©2012,JuniperNetworks,Inc.
826
JunosPulseSecureAccessServiceAdministrationGuide
C# PDF File Split Library: Split, seperate PDF into multiple files
Divide PDF file into multiple files by outputting PDF file size. control, C# developers can easily and accurately disassemble multi-page PDF document into two
pdf font size change; change font size pdf comment box
VB.NET PDF File Split Library: Split, seperate PDF into multiple
Separate source PDF document file by defined page range in VB.NET class application. Divide PDF file into multiple files by outputting PDF file size.
change font size pdf text box; pdf compression
Toviewandcancelscheduledmeetings:
1.
Intheadminconsole,chooseSystem>Status>MeetingSchedule.TheSASeries
Appliancedisplaysreal-timeinformationaboutallofthemeetingsthatarecurrently
runningorscheduled,including:
TimeandStatus—Displaysthetimeanddurationthatthemeetingisscheduledto
run,aswellasthecurrentstatusofthemeeting.
MeetingDetails—Displaysthemeetingname,ID,andpasswordrequirements.This
columnalsoincludesaDetailslinkthatyoucanusetoviewinformationaboutthe
meetingandtojointhemeeting.
MeetingRole—Displaystheroleofthemeetingcreator.Ifthecreatorwassigned
intomultipleroleswhenhecreatedthemeeting(i.e.,heisamemberofmultiple
rolesandtheapplianceisconfiguredforapermissivemerge).
AttendeeRoles—Displaystherolesoftheattendeeswhoaresignedintothe
meeting,thenumberofattendeessignedintoeachrole,andeachrole’smeeting
attendeelimit.Notethatnon-SASeriesattendeesaredisplayedunderthemeeting
creator’suserrole.
2.
Useeitherofthefollowingmethodstochangethemeetingview(optional):
Selectatimeframe(Daily,Weekly,InProgress,Scheduled)fromthedrop-down
listtocontrolwhichmeetingsaredisplayed.
Clickonanyoftheunderlinedcolumnheaderstocontroltheorderinwhichcurrently
displayedmeetingsaresorted.
3.
ClicktheDetailslinkunderameetingtoviewinformationaboutthemeetingand
optionallytojointhemeeting(optional).
4.
ChooseMySecureMeetingURLsfromtheViewdropmenutoviewpersonalURLs
yourusershavecreated.
5.
ClickthedeleteiconintherightcolumntocancelameetingortodeleteaMySecure
MeetingURL(optional).
CancellingameetingpermanentlydeletesfromtheSASeriesAppliance.Youcannot
restoreameetingaftercancellingit.
Related
Documentation
JunosPulseCollaborationOverviewonpage603
AddingRealSourceIPAddressestoLogMessages
WhenaJuniperNetworksDXapplianceorsimilarloadbalancerisdeployedinfrontof
theSASeriesApplianceinproxymode,therealclientIPaddresscanbepreservedina
DXcustomHTTPheaderandpassedtotheSASeriesAppliance.ThisrealclientIPaddress
canberecordedwithintheSASeriesAppliance’slogswhenauserlogsintotheSA(or
auserroams),allowingyoutoauditandreportontheusername/realsourceIPpairusing
theSASeriesAppliancelogs.
827
Copyright©2012,JuniperNetworks,Inc.
Chapter31:LoggingandMonitoring
C# PDF Thumbnail Create SDK: Draw thumbnail images for PDF in C#.
public override Bitmap ConvertToImage(Size targetSize). Description: Convert the PDF page to bitmap with specified size. Parameters:
pdf compression settings; adjusting page size in pdf
C# PDF Convert to Jpeg SDK: Convert PDF to JPEG images in C#.net
Using this C#.NET PDF to JPEG conversion library component toolkit, C# developers can easily and quickly convert a large-size multi-page PDF document to a
change font size in pdf; can a pdf file be compressed
TheremainderofthistopicreferstoJuniperNetworks’DXappliance.Seeyourload
balancer’sdocumentationforinformationonsendingan“X-Forwarded-For”logheader.
TherealsourceIPaddressisretrievedfromtheDXcustomheaderwhenauserlogsin
andisplacedintothesessionrecord.TherealsourceIPaddressisusedinplaceofthe
DXIPaddressintheevent,user,admin,andsensorslogifitispresentinthecontextdata.
Otherwise,thesourceIPaddressinthecontextdataisused.
ToenablethepassingofthiscustomheadertotheSASeriesAppliance,performthe
followingtasksonyourDXappliance:
1.
CreateaclusterandconfiguretheVIPandtargethosts.
2.
Definethetargetandlistensidesontheclusterconfigurationpage.
3.
IntheDXServerpage,settheCustomIPLogHeaderto“X-Forwarded-For”.
SeeyourDXdocumentationformoreinformationonconfiguringtheDXappliance.
ThefollowinglogmessageareupdatedontheSASeriesAppliance:
AUT24326(userandadminlogin)
AUT20919(userroaming)
ADM22896(adminroaming)
Related
Documentation
LoggingandMonitoringOverviewonpage805
Copyright©2012,JuniperNetworks,Inc.
828
JunosPulseSecureAccessServiceAdministrationGuide
C# PDF insert text Library: insert text into PDF content in C#.net
formatted text and plain text to PDF page using .NET NET PDF edit control allows modify existing scanned PDF text. Ability to change text font, color, size and
change font size pdf document; best way to compress pdf file
VB.NET PDF Thumbnail Create SDK: Draw thumbnail images for PDF in
Remove Password from PDF; Change PDF Permission Settings. String = Program.RootPath + "\\" 1.pdf" Dim doc New PDFDocument(inputFilePath) Dim page As PDFPage
pdf page size dimensions; change font size in pdf form field
CHAPTER32
Troubleshooting
AboutTroubleshootingonpage829
SimulatingandTrackingEventsonpage830
SimulatingEventsThatCauseaProblemonpage830
TrackingEventsUsingPolicyTracingonpage832
RecordingaTraceFileonpage833
CreatingSnapshotsoftheSASeriesApplianceSystemStateonpage834
CreatingTCPDumpFilesonpage835
SASeriesApplianceNetworkConnectivityToolsonpage836
UsingUNIXCommandstoTestNetworkConnectivityonpage837
RunningNSLookuptoTestNameServerConnectivityonpage837
RunningDebuggingToolsRemotelyonpage837
CreatingDebuggingLogsonpage838
MonitoringClusterNodesonpage839
ConfiguringGroupCommunicationMonitoringonaClusteronpage840
ConfiguringNetworkConnectivityMonitoringonaClusteronpage840
AboutTroubleshooting
TheSASeriesApplianceprovidesseveraltroubleshootingutilitiesthatenableyouto
monitorthestateofyoursystem,includingclusters,ifyouusethem.Thesetopicsprovide
anoverviewofthevarioustroubleshootingtasksthatareavailablebyusingtheSASeries
Appliance:
TroubleshootingcapabilitiesareavailableonallSASeriesproducts—youdonotneeda
speciallicensetousethem.Note,however,thatthefollowingadvancedfeaturesarenot
availableontheSA700SeriesAppliance:
Sessionrecording
Monitoringandconfiguringclusters
Related
Documentation
SimulatingandTrackingEventsonpage830
CreatingSystemStateSnapshotFilesonpage834
829
Copyright©2012,JuniperNetworks,Inc.
C# PDF Convert to Tiff SDK: Convert PDF to tiff images in C#.net
zoomValue, The magnification of the original PDF page size. 0.1f
best way to compress pdf; change file size of pdf
C# PDF Convert to Word SDK: Convert PDF to Word library in C#.net
zoomValue, The magnification of the original PDF page size. 0.1f
optimize scanned pdf; batch reduce pdf file size
CreatingTCPDumpFilesonpage835
SimulatingandTrackingEvents
YoucandeterminewhyyourSASeriesAppliancedoesnotallowyoutoaccomplisha
taskthatyoudesirebysimulatingandtrackingproblematicSASerieseventsusingsettings
intheMaintenance>Troubleshooting>UserSessions>PolicyTracingpageoftheadmin
console.
Theeventsinquestionarerelatedtoauthentication,authorization,andaccessfora
particularuser.Theyareentirelydrivenbywhathappensduringausersession.This
appliestobothsimulationandpolicytracing.
Theeventsthatarecaptureddonotincludeanyothersystemrelatedevents.TheSA
SeriesAppliancemerelyusestheeventsasafilteringmechanismtoreducethenumber
oflogsandhighlighttheproblem.
Related
Documentation
SimulatingEventsThatCauseaProblemonpage830
TrackingEventsUsingPolicyTracingonpage832
SimulatingEventsThatCauseaProblem
TheSASeriesApplianceallowsyoutotroubleshootproblemsbysimulatingtheevents
causingtheproblem.UsingtheMaintenance>Troubleshooting>UserSessions>
Simulationpage,youcancreatevirtualusersessionswithoutrequiringactualend-users
tosignintotheSASeriesApplianceandrecreatetheirproblems.Inaddition,youcan
alsousetheSimulationtabtotestnewauthenticationandauthorizationpoliciesbefore
usingtheminaproductionenvironment.
Tousethesimulator,youmustspecifywhicheventsyouwanttosimulate(forexample,
youcancreateavirtualsessioninwhich“JohnDoe”signsintothe“Users”realmat6:00
AMfromanInternetExplorerbrowser).Then,youmustspecifywhicheventsyouwant
torecordandloginthesimulation.Youcanlogthreemajortypesofeventstothe
simulationlog:
Pre-Authentication—TheSASeriesApplianceeventsthatarecapturedwillnotinclude
anyothersystemrelatedevents.Eventsaremerelyusedasafilteringmechanismto
reducethenumberoflogsandhighlighttheproblem.
RoleMapping—TheSASeriesApplianceeventsthatarecapturedwillnotincludeany
othersystemrelatedevents.Eventsaremerelyusedasafilteringmechanismtoreduce
thenumberoflogsandhighlighttheproblem.
ResourcePolicies—TheSASeriesApplianceeventsthatarecapturedwillnotinclude
anyothersystemrelatedevents.Eventsaremerelyusedasafilteringmechanismto
reducethenumberoflogsandhighlighttheproblem.
Copyright©2012,JuniperNetworks,Inc.
830
JunosPulseSecureAccessServiceAdministrationGuide
Tosimulateausersession:
1.
Intheadminconsole,chooseMaintenance>Troubleshooting>UserSessions>
Simulation.
2.
IntheQueryNamefield,enteranameforthequery.
3.
IntheUsernamefield,entertheusernameoftheSASeriesuserwhoseexperience
youwanttosimulate.Notethatyoumayuseawildcardcharacter(*)inplaceofa
username.Forexample,ifyourusersaresigningintoananonymousserver,youmay
wanttousethewildcardcharacter(*)sinceyoucannotknowtheinternalusername
thattheSASeriesAppliancewillassigntotheuser.
4.
FromtheRealmdropdownmenu,selecttherealmoftheSASeriesuserwhose
experienceyouwanttosimulate.
5.
IfyouwanttodeterminewhethertheSASeriesApplianceappliesaspecifictypeof
resourcepolicytoauser’ssession,enterthespecificresourceyouwanttosimulate
intheResourcefieldandselectapolicytypefromtheResourcedrop-downlist.Then:
IfyouwanttodeterminewhetherausercansuccessfullysignintotheSASeries
Appliance,selectthePre-Authenticationcheckbox.
Ifyouwanttodeterminewhetherausercansuccessfullymaptoaspecificrole,
selecttheRoleMappingcheckbox.Notethatthisoptioncontrolswhetherrole
mappingresultsareloggedtothesimulatorlog,notwhethertheSASeriesAppliance
runsrolemappingrules.TheSASeriesAppliancealwaysrunsrolemappingrules,
evenifyoudonotselectthischeckbox.
SpecifythetypesofpoliciesyouwanttologusingthecheckboxesintheEventsto
Logsection.
Forexample,ifyouwanttotestwhetherausercanaccesstheYahooWebsite,
enter“http://www.yahoo.com”intheResourcefield,selectWebfromthedrop-down
list,andselecttheAccesscheckboxintheEventstoLogsection.
6.
IntheVariablessection,useacombinationoftextandvariablestocreateacustom
expressionthatreflectstheexactsamevaluesasintherealsessionoftheuserwho
isfacingaproblem.Forexample,ifyouwanttocreateasessioninwhichtheuser
signsintotheSASeriesApplianceat6:00AM,enter“time=6:00AM”intheVariables
field.Forcompleteinstructionsonhowtocreateacustomexpression.Youmayalso
viewthesyntaxforagivenvariablebyclickingthearrownexttoitintheVariables
Dictionary.
Ifyoufailtocreateacustomexpressionthatincludesthevirtualuser’sIPaddress,
theSASeriesApplianceusesyourcurrentIPaddressinstead.Alsonotethatifyou
usetherolevariabletospecifytheroleofthevirtualuser(forexample,role=”Users”),
theSASeriesApplianceignoresresultsfromrolemappingrulesandassignsthevirtual
usertotherole(s)youspecify.
7.
Chooseoneofthefollowingoptions:
RunSimulation—Runsthespecifiedsimulationandcreatesanon-screenlogfile.
SaveQuery—Savesthequery.
831
Copyright©2012,JuniperNetworks,Inc.
Chapter32:Troubleshooting
SaveQueryandRunSimulation—Runsthespecifiedsimulationandalsosavesit
forlateruse.
8.
Afterrunningthesimulation,chooseSaveLogAstosavethesimulationresultstoa
textfile.
Related
Documentation
SimulatingandTrackingEventsonpage830
TrackingEventsUsingPolicyTracing
TheSASeriesApplianceallowsyoutotroubleshootproblemsbytrackingeventswhen
ausersignsintoarealm.TheMaintenance>Troubleshooting>UserSessions>Policy
Tracingpageallowsyourecordapolicytracefileforanindividualuser,theSASeries
Appliancedisplayslogentriesthatlisttheuser’sactionsandindicateswhyheisallowed
ordeniedaccesstovariousfunctionssuchasaccessingtheWeborafileserver.
Forexample,youmaycreatea“HumanResources”realmandcreatetworole-mapping
ruleswithintherealm:
AllEmployees—Withinthisrole,youonlyenablewebbrowsing.Youmapuserstothe
roleusingtherule:ifusername=*,mapto“AllEmployees.”Inotherwords,anyuser
whoisallowedtosignintotherealmautomaticallymapstothe“AllEmployees”role.
HumanResourcesStaff—Withinthisrole,youenableweb,file,andmeeting
functionality.Youmapuserstotheroleusingtherule:ifLDAPgroup=humanresources,
mapto“HumanResourcesStaff.”Inotherwords,ausermustbelongtothe
“humanresources”groupontheLDAPauthenticationserverinordertomaptotherole.
YoumaythinkthatJoeshouldbeamemberofbothroles,butwhenhesignsintotheSA
SeriesAppliance,hecannotaccessthefilebrowsingorSecureMeetingfunctionality
enabledinthe“HumanResourcesStaff”role.Whenyouturnonpolicytracingtodetermine
whyJoecannotaccessallofexpectedfunctionality,youwillseelogentries.
NOTE: Useraccesslogsareonlyreportedforpoliciesthatarecheckedunder
EventstoLog.
Byreviewingthetracefile,youcandeterminetheproblem(anexampleisshownhere):
joe(humanresourcesrealm)-Nomatchonrule‘group.humanresources’
ThisentryshowsthattheSASeriesAppliancedidnotmapJoetothe“HumanResource
Staff”rolebecauseheisnotamemberofthe“humanresources”groupontheLDAP
server.
Usethistabifyourusersarehavingproblemsaccessingfunctionstheyexpecttousein
theirroles.Theeventsloggedinthepolicytracefilemayhelpyoudiagnosethese
problems.
Copyright©2012,JuniperNetworks,Inc.
832
JunosPulseSecureAccessServiceAdministrationGuide
Tocreateapolicytracefile:
1.
Intheadminconsole,selectMaintenance>Troubleshooting>UserSessions>
PolicyTracing.
2.
IntheUserfield,entertheSASeriesusernameoftheuseryouwanttotrace.Note
thatyoumayuseawildcardcharacter(*)inplaceofausername.Forexample,ifyour
usersaresigningintoananonymousserver,youmaywanttousethewildcardcharacter
(*)sinceyoucannotknowtheinternalusernamethattheSASeriesAppliancewill
assigntotheuser.
3.
IntheRealmfield,selecttheuser’srealm.NotethattheSASeriesAppliancedoes
notallowyoutoselectarealmthatmapstoananonymousauthenticationserver.
4.
UnderEventstolog,selectthetypesofeventsyouwanttowritetothepolicytracing
logfile.
5.
ClickStartRecording.AsktheusertosignintotheSASeriesApplianceafteryouhave
startedrecording.
6.
ClickViewLogtoseethelogentries.
7.
ClickStopRecordingwhenyouhaveobtainedenoughinformation.
8.
Reviewmessagesinthelogfiletodeterminewhatiscausingtheunexpectedbehavior.
Ifyoucannotdetermineandfixtheproblem,clickSaveLogAstosaveacopyofthe
logfiletoalocationonyournetwork.Then,sendthefiletoJuniperNetworksSupport
forreview.
9.
ClickClearLogtoclearthecontentsofthelogfile,orclickDeleteTracetoclearthe
contentsofthelogfileandtoremovethedefaultentriesfromtheusernameand
realmfields.
Related
Documentation
CreatingTCPDumpFilesonpage835
RecordingaTraceFile
WhenaWebsitedoesnotdisplayproperlythroughtheSASeriesAppliance,the
Maintenance>Troubleshooting>UserSessions>SessionRecordingtaballowsyouto
recordatracefilethatlistsauser’sactions.Inaddition,youcanusethistabwhen
connectingtoaclient/serverapplicationthatdoesnotbehaveasexpectedthroughthe
SASeriesAppliance.
Whenyoustartrecordingatracefile,theSASeriesAppliancesignsoutthespecifieduser
andthenstartsrecordingalluseractionsaftertheusersignsinagainandisauthenticated.
NotethattheSASeriesAppliancenotifiestheuserafterauthenticationthatuseractions
arebeingrecorded.
833
Copyright©2012,JuniperNetworks,Inc.
Chapter32:Troubleshooting
Torecordatracefile:
1.
Intheadminconsole,chooseMaintenance>Troubleshooting>UserSessions
>SessionRecording.
2.
Entertheusernameoftheuserwhosesessionyouwanttorecord.
3.
SelecttheWeb(DSRecord)checkboxtorecordtheuser’swebsessionandthen
selecttheIgnorebrowsercachecheckboxifyouwanttoignorecachedcopiesofthe
problemWebsite,whichtheSASeriesAppliancewouldnototherwiserecordasa
partofthetracefile(optional).
4.
SelecttheClient/Server(forJCP)checkboxtorecordJavaCommunicationProtocol
client/serverapplicationsessions(optional).
5.
ClickStartRecording.TheSASeriesAppliancesignsouttheuser.
6.
InstructtheusertosigninagainandbrowsetotheproblemWebsiteorconnectto
theclient/serverapplicationthroughtheSASeriesAppliance.
7.
ClickStopRecording.
8.
Downloadthetracefile(s)fromtheCurrentTraceFilesection:
a.
ClicktheDSRecordLoglinktodownloadtheWebtracefile.
b.
ClicktheJCPorNCPClient-SideLoglinktodownloadtheclient/serverapplication
tracefile.
9.
Emailthefile(s)toJuniperNetworksSupportforreview.
10.
SelecttheDeletebuttontoremovethetracefile(s)youjustcreated(optional).
Related
Documentation
SimulatingandTrackingEventsonpage830
CreatingSnapshotsoftheSASeriesApplianceSystemState
TheMaintenance>Troubleshooting>SystemSnapshottaballowsyoutocreatea
snapshotoftheSASeriesAppliancesystemstate.Whenyouusethisoption,theSA
SeriesAppliancerunsvariousutilitiestogatherdetailsontheSASeriesAppliancesystem
state,suchastheamountofmemoryinuse,pagingperformance,thenumberofprocesses
running,systemuptime,thenumberofopenfiledescriptors,portsinuse,andSASeries
FIPSlogmessages.
Youcanchoosetoincludeorexcludesystemconfigurationanddebuglogs.However,
debuglogsareparticularlyimportantintheeventofaproblem.Youwillneedtosetthe
debuglogatacertainlevelandaddtheeventslistasdirectedbyyourSupport
representative.Recreatetheproblemoreventandthentakeasnapshotandsenditto
Support.Thedebuglogisencrypted;youcannotviewit.
Copyright©2012,JuniperNetworks,Inc.
834
JunosPulseSecureAccessServiceAdministrationGuide
Documents you may be interested
Documents you may be interested