Pulse Connect Secure with ansible

[DM]

Hi,

as I get more and more roles on my Pulse Secure Appliance I wonder if I can automat this process using tools like ansible.

So far I haven't found any how to so maybe the community can help with that.

[RInaldo]

I'm also interested in this option. Is it already possible to do any configuration on Pulse connect secure with Ansible?

[zanyterp]

based on a quick look, no, this will not be possible as ansible uses SSH for communication, which is not available on the PCS/PPS platform.
if there is an option to use REST, yes, it should be possible

[caleb.bontrager]

While Ansible does ordinarily use ssh for configuration management, it also can make use of REST api's to do config management - beginning with the generic uri module. There are a plethora of networking vendors that have built and publish Ansible modules for managing their devices via REST api - for example FortiOS - https://docs.ansible.com/ansible/latest/modules/fortios_vpn_ssl_settings_module.html#fortios-vpn-ssl.... Creating and publishing modules for managing PSA via the REST api is definitely something that Pulse should be looking at doing as well.

[yutsi]

hello,

well... it should/might be possible with some preparations...
the way is the netconf protocoll, which is pointing to DMI agent panel beneath system/configuration.
when you configure the standard port of dmi 830 to 22 then ssh is working and here is how:
https://help.ivanti.com/ps/help/en_US/PCS/9.1R13/pcsppsdmisolg/inbound_dmi.htm

br,

[zanyterp]

thank you for the feedback, @caleb.bontrager. if you have not done so, please reach out to your account team to let them know you would like to see this

[zanyterp]

thank you for that idea, @yutsi