We have an issue where Pulse on ios8 cannot tunnel any traffic. The tunnel starts fine but a tcpdump on the SA shows nothing coming from that device. An ios7 device works fine using the exact same Pulse version and policy.
Is anyone else seeing this issue? Any ideas?
Do you have a 'Never Connect' VOD rule configured in the profile? We are starting to receiving information from other customer's this behavior has changed in iOS8.
We've had a case open on the Citrix issue. I'm not sure that it is a Citrix or IOS8 specific problem. Citrix works fine when not using Pulse and on our internal network.
We were able to get the latest version of Pulse on IOS8 working with Citrix on IVE version 8.0R7.1 on our test MAG, but it wouldn't work with prior versions. I'm not sure if it will work when we upgrade our production Active / Passive cluster yet, but it at least works on our lab box.
What software version are you running on the Pulse Secure gateway (SA/MAG device)? If you are running 7.4R12 and below, I believe there was an similiar issue which we resolved in 7.4R13 (892096). The release notes state JSAM, but I did find a few tickets which were related to iOS8 and confirmed resolve due to this change.
Upgrading to 8.0 seems to resolve the issue. I see that the IOS8 KB article was just updated to indicate at least 7.4R12 is required.