Host Checker with Chrome?

[hutchingsp]

We currently mandate Internet Explorer for our PSA.

We would like to allow Chrome for the HTML5 functionality.

Currently we have a Pulse Secure icon on the HTML portal page once people login.

We would like that anyone authorised for HTML5 can login through Chrome but they will not see the Pulse Secure icon.

We would like that anyone authorised for VPN Tunnel can login through IE and so long as they pass host checker they see the Pulse Secure icon.

What's the simplest way to do this please?

We're on 8.2r3

[Filbert]

You would need to create two separate Roles. One with Tunneling enabled and one without.Then map the user to the Role using a Custom expression based on the Agent string like userAgent = '*Chrome*'
Put this one first in the role mapping rules making sure to check the "Stop Processing rules when this rule matches" checkbox. Of course if you are already using groups to do role mapping your custom expression will need to include those requirements as well.

[hutchingsp]

Fantastic thank you, so essentially I can put the Chrome stuff first in one rule or several and only when it goes past those, would it try to apply the role, and the host checker for that rule would kick in?

Nice solution

[zanyterp]

Host Checker will run when users login, regardless of the browser, if you use the same realm. The difference will be what roles are mapped based on the success/failure of the policy