Cannot access internal resources with Enterprise mode SSLVPN client on Windows 7 despite getting connected without problems

  • 7007199
  • 12-Nov-2010
  • 26-Apr-2012

Environment

Novell Access Manager 3.1 SSLVPN Server

Situation

ESP enabled SSLVPN server running Access Manager 3.1.2 IR2 setup for Enterprise mode. All users (Windows and Linux) can connect to the server and most can access the protected resources defined by the traffic policies. A few users on Windows 7 reporting that they could connect but not access protected resources. These Windows 7 clients were running IE8 with the forceJRE option enabled to bypass ActiveX controls (/sslvpn/login?ForceJRE=true).

After the users connect and look at the Policy TAB, they are shows the complete list of policies that the  user is entitled to see and communicate with.

Resolution

Make sure that the Java client is installed on the Windows 7 host when using ForceJRE mode. With other Windows platforms, the lack of a Java machine on the host triggers a warning, but not with Windows 7 e.g. Windows XP displays a blank page during the connection process when no Java is available.

Access Manager 3.1.3 will address this so that Windows 7 behaves as all other Windows platforms do for consistency.