No internet access when Pulse Secure: Connected

[Amper]

@zanyterp Thanks for your answer.

Where can I get a more updated version? And how can I open a case with support?

[zanyterp]

you are welcome, @Amper
you can do both at https://my.pulsesecure.net.

[Amper]

I just installed and tested version 9.1r15 and the result is the same. Once I connect to my client through the vpn, all internet access is cut off.

Is it possible through the configuration that my own client cuts off all my accesses?

[zanyterp]

thank you for testing
yes, it is possible for the configuration terminates it

[Amper]

In that case, what should I modify in the configuration so that it does not cancel the rest of the external connections?

[zanyterp]

ensure that your ACL allows full internet access

disable split tunneling (so that all traffic goes through the tunnel)

i would also recommend opening a case with our support team for further investigation and discussion

[Adam08]

Hey all,

I've got a vendor experiancing this issue too on his Windows 10 machine (Didnt grab the build version). I tried several things and nothing has worked so far:

• Upgraded Pulse Desktop Client from 9.1r13 to 9.1r15
• Checked for updates
• Disabled all other VPN adapters (Cisco AnyConnect, Sonicwall, FortiCLient VPN)
• Stopped Citrix Workspace
• Uninstalled Zscaler
• Unchecked IPv6 from their main network adapter as well as the Pulse virtual adapter
• Tried different VPN URLs for connection on the Pulse client
• Rebooted a couple times
• I've been told by Security that they're not connecting through a "full tunnel" VPN 
• They are apart of the same VPN AD group i'm in
• The subnet they're on isn't hindered or blocked
• Other vendors don't seem to be having this issue
• I'm not having this issue

They can get to the servers they need to once connected (though they do have issues using hostnames to conenct and resort to using IPs, which is odd), they just have absolutly no internet outside on their machine. Not sure if anyone else has had any luck on this. 

Thanks, 

[zanyterp]

is their local network running the same IP scheme as your corporate network?
does the ACL allow for full access?
is your dns server allowed in the ACL?

[scoutt]

@Adam08, You mentioned that they are "not" using the full tunnel. If I'm not mistaken the split tunnel doesn't even take part in that type configuration. So if they don't have internet outside of being connected than it seems like something on the users side. Just my opinion

I only say this as we had one user experience this, in the full tunnel, and when I got ahold of the laptop and I couldn't  even make it happen. The user got a new laptop and never had a problem since.

[mailbnade03]

i would also recommend opening a case with our support team for further investigation and discussion