Users may define static routes on their PCs to continue to access the local LAN while simultaneously connecting to the remote LAN. The IVE appliance serves as the DNS gateway for the client and knows nothing about the user’s LAN. When Network Connect runs, the client effectively becomes a node on the remote (corporate) LAN and becomes invisible on the user’s local LAN.

If you do not want to enable other IVE features for certain users, create a user role for which only the Network Connect option is enabled and make sure that users mapped to this role are not also mapped to other roles that enable other IVE features. The only exception is for traffic initiated by other IVE-enabled features, such as Web browsing, file browsing, and telnet/SSH. Network Connect takes all traffic to and from the client and transmits over the secure Network Connect tunnel. This feature supports all Internet-access modes including dial-up, broadband, and LAN scenarios from the client machine and works through client-side proxies and firewalls that allow SSL traffic over port 443. The Network Connect (NC) provides a clientless VPN user experience, serving as an additional remote access mechanism to corporate resources using an IVE appliance. Network Connect is a software package from Juniper Networks that provides a Virtual Private Network (VPN) solution. Arbitrary code would be executed in the context of the client application.Please note: Only version 6.5.0 is available via the provided download links currently. If the vulnerability were successfully exploited, this would corrupt process memory, resulting in arbitrary code execution. Invoking the object from a malicious website may trigger the condition. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer. Juniper SSL-VPN Client ActiveX control is prone to a buffer-overflow vulnerability.

An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the client application. This signature detects attempts to use unsafe ActiveX controls in Juniper SSL-VPN Client. HTTP: Juniper SSL-VPN Client ActiveX Control

Junos vpn client