Routing issue with Junos Pulse

[mdella_]

Hello,

I created a role to use Junos Pulse to reach protected resources in our LAN. One of my clients got an issue with routing in his computer.

I attached some route print and netstat. After he connects to Junos Pulse and get an IP address of internal network, he starts to ping every resource and he can trace route to everything. The first hop is the internal interface of MAG and second hop is the ifrewall interface.

The problem is when he tries to start a RDP connection or connect to outlook or connect to any applications. Nothing works.

If we add a static route (default route) in his computer with next-hop the firewall interface, every application starts to connect. Everything works.

I want to know why this static route made things works and the routes created by Junos Pulse didnt work?

Thanks

[RB26DETT_]

I ran into this same problem -

You need to enable split tunneling for Pulse under the user role ---> network connect tab.

In addition, you have to create a split tunneling resource policy and define the network range you want going through the tunnel.  By default, JunOS pulse will add a default route into your routing table.

[mdella_]

If i dont enable split tunneling, all the traffic must go through the tunnel, but in wireshark i just see ICMP packets inside the tunnel (Juniper network adapter interface).

The default route point to my IP address.

[mdella_ · Accepted solution]

Hi,

The proble was with TCP stack im my customers computers.

When he connected, just the ICMP stack worked fine, and when he inserted a new route in his computer, the TCP stack was restarted and started to work again.

It was a very specific issue.

[zanyterp_]

Very cool; thank you for sharing