User's Guide (Pulse Secure Client for Mac)

Index

1. Available platforms
2. How to change the password
3. How to login to SSL-VPN of J-PARC
4. How to logout
5. Compliance check
6. The length of time-out

1. Available platforms

Supported platforms of Pulse Secure Client(application for connection)

Mountain Lion(10.8), Mavericks(10.9), Yosemite(10.10), El Capitan(10.11), Sierra(10.12)*

* macOS Sierra(10.12) has unable to connect to JLAN SSL-VPN since it has not been listed as compatibility OS with SSL-VPN connection distributed by the equipment manufacturer. However JLAN support office identified that macOS Sierra(10.12) can be connected to SSL-VPN by following instructions below.(still no supported by the manufacturer)

Go to Network Connect Part for the following platforms;

MacOS X 10.6.x, OS X 10.7.x

Requirement Software

Web browser

Safari

Java (8 or later version)

For the client environments that are enable to connect based on JLAN-support office identified and ones that manufacturer supports, visit here.

2. How to change the password

UserID and initial-password are sent you after the completion of your SSL-VPN application.

Please change the initial-password as soon as you received it.

※If you already use SSL-VPN connection with "Network Connect" with your own password, continuously use them to connect with "Pulse Secure Client".

So no retaking the password is necessary for connecting with "Pulse Secure Client".

Reminder

You should register your new password before using the SSL-VPN because the Initial-password cannot use for login.
The Initial-password has an expiration date. Your account will be locked if the password is not changed.

If you need password information，visit here.

2.1　Start your browser, and access to J-PARC SSL-VPN certification site.

About URL for J-PARC SSL-VPN

(Accessible only from JLAN, JAEA-LAN and KEK-LAN. If you are outside from J-PARC/KEK/JAEA, the certification site URL is written in the page or paper that you got the initial-password information.)

2.2　First of all, click the "Change Password".

(If the site is displayed in Japanese, operate "Change to English" shown as the below example window.)

2.3　Input your "UserID", and click the "Next" button.

2.4 Input your current password ( or initial-password ), and click the "Next" button.

Must see details of the initial-password, visit here.

A matrix is effective for 5 minutes.
Reload the page, if 5 minutes or more passed after the matrix is displayed.
The account will be locked after 10 invalid password trials.
In the case, please contact to JLAN-support office.

2.5　Decide your new password. (Must see the rule of new password, visit here.)

And input your new password (do not forget new password should include not only Image-password but also PIN), and click the "Next" button.

2.6 　You must type in your new password 3 times (STEP1, STEP2, STEP3) to memorize it to the system. This is STEP2.

Please input your new password again with newly displayed matrix, click the "Next" buttorn.

2.7　This is STEP3.

Please input your new password again with newly displayed matrix, and click the "Next" buttorn.

2.8　The procedure of changing initial-password has been completed.

If you want to login the SSL-VPN, click the "Return" button.

3. How to login to SSL-VPN of J-PARC

When using MacOS X 10.10～10.12 with "Safari 10" or connection failure with following instruction, go to [Not used Java].

3.1　Start your browser, and access to the certification site.

URL for SSL-VPN of J-PARC connection ( Accessible from JLAN, JAEA-LAN and KEK-LAN. )

3.2　Input your "Login ID", and Select "mac-10.8-or-later" in the pulldown menu, and click the "Next" button.

(If the site is displayed in Japanese, operate "Change to English" shown as the below example window.)

3.3　Input your password, and click the "Login" button.

A matrix is effective for 5 minutes.
Reload the page, if 5 minutes or more passed after the matrix is displayed.
The account will be locked after 10 invalid password trials.
In the case, please contact to JLAN-support office.

3.4　The "Loading Components.." windows is displayed, and the Compliance check of your PC will be started.

※For "Safari" on OS X

At the first access, it is unable to connect cause of no Java permission to access.

Still keep open the browser "Safari" then change the setting follow the instruction to connect.

Select "Safari" from the menu bar > "Preferences..." > Select "Security" tub >
Safari 6 : Click "Manage Website Settings..."
Safari 9 : Click "Plug-in Settings..."
Select "Java" from the side bar > Click "Allow" of "secgw.j-parc.jp" is showing in a "Configured Websites"
Select "Run in Unsafe Mode" > Click "Trust" on the confirmation screen
Confirm the "!" is showing beside "Allow" then click "Done"
Close "Preferences(Security)" of "Safari" then close the browser "Safari".

If the system detected concerns on your PC, this window will be displayed, go to "5. Compliance check".

3.5 If the client-host checking procedure is completed, you can see the "Welcome to the Junos Pulse Secure Access Service." window.

Click the "Start" button, your PC will be connected to JLAN via SSL-VPN.

When the first log_in and update, Junos Pulse downloading and installing takes about 3minutes.
After first log_in, Junos Pulse has been installed on the PC and automatically performed when SSL-VPN use.

4. How to logout

To logout, there are two methods as follws;

On the browser
From the "Pulse Secure Client" window

4.1 On the browser

Select the "Welcome to the Junos Pulse Secure Access Service." window, and click the "Sign Out" button.

4.2 From the "Pulse Secure Client" window

Logout from "Pulse Secure Client" window if you closed the "Welcome to the Secure Access SSL VPN .." window.

Click the "Disconnect" button on the "Pulse Secure Client" window.

5. Compliance check

When you use your PC to connect to JLAN with SSL-VPN, your PC should be passed the compliance check executed by the VPN-system.

The check-list of the compliance check is the following;

5.1 OS, Web-browsers, Java

Visit here.
OS should be updated to the latest.
Applications should be installed most recent version.

5.2 Anti-virus software

Install anti-virus software listed in"Supported anti-virus softwares" to your PC.
The pattern file in your PC for the anti-virus software should be updated in 7 days.
Real time protection is effective.

6. The length of time-out

If your client PC does not transmit network packet to the VPN-system for 1 hour, the VPN connection will be interrupted automatically.
The maximum session time of the VPN connection is 24 hours.