AD Device Authentication - Pulse Connect Secure v8.2r5

[jonchill]

On AD we've got two groups setup for access to Pulse, a user group and a device group.

What we want to be able to do is in the user role mapping if the user credentials and the device being used exist in the groups then the user gets assigned a role, if they don't exist in either of or both the groups then it fails.

I've tested with just authenticating against the AD user group and it works fine but as soon as I try and introduce the device group it fails.

We're trying to manage not only what users have access to Pulse but also what devices.

Any help would be much appreciated.

Thanks

Jon

[zanyterp]

Simultaneous machine & user auth is not possible; one or the other is supported
if you do machine auth against one realm and then user auth against another realm, with a source IP restriction for the internal network, it may work; but because the user auth disconnects the machine auth, I am not sure if that will work