Getting Juniper Network Connect VPN Client Running on Mac OS X 10.6+

There are a number of problems getting the Juniper Network Connect VPN client running on the Mac. The permissions on directories are not correct after install, there are issues with the 64 bit kernel, problems if VMWare or Parallels is installed, etc. These instructions are the result of research I did to get Network Connect 6.2.0 running on OS X 10.6.8 (Snow Leopard). If you have Network Connect installed already you should uninstall it completely.

To Remove Network Connect
You may not have some of the files listed to run or remove and you can just skip those steps. You should review these steps carefully particularly if you have other Juniper products installed. They remove directories that may include installations of other Juniper products. These instructions should be run from your home directory.

  1. sudo /usr/local/juniper/nc/install/
  2. sudo rm -R /Applications/Network
  3. sudo rm -R /usr/local/juniper
  4. sudo rm -R /Library/Frameworks/*
  5. sudo rm -R /Library/Internet Plug-ins/*
  6. sudo rm -R /Library/Widgets/Network Connect.wdgt
  7. sudo rm /private/var/db/receipts/*
  8. rm -R Library/Application Support/Juniper Networks
  9. rm -R Library/Caches/
  10. rm Library/Preferences/
  11. rm -R Library/Logs/Juniper Networks

To Install Network Connect

  1. Download NetworkConnect.dmg. I was unable to get the applet installer from the VPN login to work correctly. You can download the dmg file directly from your vpn site. Add the path “/dana-cached/nc/NetworkConnect.dmg” to your VPN URL. If your VPN login is at… then you would download from You may have to login to the VPN site to access the download.
  2. Open NetworkConnect.dmg and run the installer. If you get an error saying there is already a version installed do the uninstall steps above.
  3. sudo chmod 755 /usr/local/juniper/nc/[version number]
  4. sudo mkdir ‘/Applications/Network’
  5. If you have VMWare or Parallels installed you will have to deactivate the network interfaces they add. If you don’t do this you will probably be able to connect but have a very high packet loss rate. You may have similar issues with other products that interact with routing. To do this go to ‘System Preferences -> Network’ and change ‘Configure IPv4’ to ‘off’ for these extra interfaces. They will typically be named something like ‘Ethernet Adaptor (en2)’. Entries like these in the Network Connect log are indicative of this type of problem:
            rmon.warn adding back the missing route to with gw, metric 1, if_id 9
   Adding route: -> (metric:1) (if_id:9)
            rmon.warn deleted route to with gw, if_id 7  reappeared
   Deleting route: (routemon.cpp:1979)
            rmon.error Failed to delete route. No such process (routemon.cpp:1014)
  6. sudo chmod 4711 /usr/local/juniper/nc/[version number]/ncproxyd
  7. If your kernel is running in 64 bit mode you will have to change it to 32 bit mode. This may no longer be true with newer versions of Network Connect but it is for version 6.2.0. You can change the kernel to 32 bit mode temporarily by shutting down then holding the 3 and 2 keys down while starting up.

You should now be able to launch Network Connect from Applications. Since you did not use the applet installer you will have to enter your VPN URL. This does not include the path part of the URL. For example:

About the Author

Object Partners profile.

One thought on “Getting Juniper Network Connect VPN Client Running on Mac OS X 10.6+

  1. Ron T says:

    Just wanted to say thanks a lot for this.

    My company’s VPN setup is stupid. After two hours of unf*cking my cert, I had to manually download nc.dmg. The path helped a lot. Thanks!

  2. Amy says:

    THANK YOU SO MUCH!!! i have spent the last 3 hours trying to do this as my IT department left the URL/ instructions off of the list!! read this and it worked first time. Legend! thank you

  3. Omar M says:

    Thank you a lot for this helpful post : I was enable to use my VPN connection via Network Connect since I updated my OS to Al Capitan… You saved my life 🙂

  4. Riccardo says:

    I follow all passage, then at the first connection after user and password, it ask me if i won’t download for this site, i click “Alway” and then round round round but not established a connection. There isn’t folder ‘Local/Logs/Network Connect’ so i don know where i can se error.
    The version is 8.0.6
    these are permission:
    XXXXX:~ USER$ ls -lrt /usr/local/juniper/nc/8.0.6/
    total 248
    drwxr-xr-x 3 root wheel 102 13 Ago 2014 nctun_tiger.kext
    drwxr-xr-x 3 root wheel 102 13 Ago 2014 nctun.kext
    -rws–x–x 1 root wheel 123532 13 Ago 2014 ncproxyd
    Ventrue:~ SirMithras$

    Someone can help me, please?

    …and apologize for my pour english

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Blog Posts
Using Conftest to Validate Configuration Files
Conftest is a utility within the Open Policy Agent ecosystem that helps simplify writing validation tests against configuration files. In a previous blog post, I wrote about using the Open Policy Agent utility directly to […]
SwiftGen with Image & Color Asset Catalogs
You might remember back in 2015 when iOS 9 was introduced, and we were finally given a way to manage all of our assets in one place with Asset Catalogs. A few years later, support […]
Tracking Original URL Through Authentication
If you read my other post about refreshing AWS tokens, then you probably have a use case for keeping track of the original requested resource while the user goes through authentication so you can route […]
Using Spring Beans in a Kafka Streams ExceptionHandler
There are many things to know before diving into Kafka Streams. If you haven’t already, check out these 5 things as a starting point. Bullet 2 mentions designing for exceptions. Ironically, this seems to be […]