Looking for a Method to Disconnect Active Session, when LDAP user is Disabled

[michael.l.fusco@jpl.nasa.gov]

Hello Community,

Looking for a way to enforce disconnection of an Active VPN Session when the LDAP user status is changed form "Employed" to "Terminated".

Taking all Ideas.

[zanyterp]

we do not have anything on-appliance that will do that
if you have a script that runs to trigger a series of actions on multiple systems when that happens, you can add the pcs to that mix and terminate any session for the user via REST

[michael.l.fusco@jpl.nasa.gov]

What about Dynamic Role assingment?
Can the PCS every "15 mins" query the status of a User's Object in LDAP and if an Attrb or membership change move the Active session from a "role-allow" to a "role-quarentined"

 

[michael.l.fusco@jpl.nasa.gov]

Has Anyone every use the Pulse Secure Profiler PPS to do this?

[zanyterp]

there is currently nothing on the system that will run the query against LDAP after login; those values are set until the end of the session and the user attempts login again

[zanyterp]

i do not believe profiler is able to terminate sessions; however, i would recommend opening a case with our support team to confirm