Description

This article describes the issue of the sign-in page for the Junos Pulse Access Control Service taking a long time to load on an iOS device.

Symptoms

  • The sign-in page for the Junos Pulse Access Control Service takes anywhere from 15 to 45 seconds to load, when it is redirected from an SRX firewall.
  • The SRX is correctly configured.
  • In our lab, the test was conducted with UAC 4.2R1and SRX 220 running Junos 12.1R1.9.
  • The PC was running Windows 7 Pro with a wireless USB adapter.

Solution

  • Using standard troubleshooting methods on the IC (SSL dump), it was discovered that the delay was actually introduced by the iOS device. There would be gaps of 5 seconds or more between the Safari browser requesting an object (images, and so on) from the IC. The IC would respond immediately; but the Safari browser would seem to wait a few seconds, before requesting another object.
  • It is possible that the browser needs to process each piece, before it moves on.
  • You can verify if the iOS device is the cause, by simply taking a laptop running a Windows operating system and attempt to connect.  In our labs, a laptop connecting to the same SRX would immediately display the sign-in page for the IC.

No solution is available at this time. It is most likely a limitation of the browser on the iPhone/iPad device.