Windows File resources access blocked

[TheRidingMan]

The Widows files page on our PCS VPN is giving the following error:

"Access to the Web site is blocked by your administrator. Please notify your system administrator. Made request for $request to $host:$port"

We upgraded to 9.1R8.4 (build 12177) on 4/14, but our firewall logs suggest that access didn't break until 4/20.  We got an increase in our incremental license count at around the same time as the last record on our firewall of successful file access from our VPN to file server, but it's hard to see how a change in license count could have caused this problem.

The error above happens simply when trying to view this page:

https://(redacted)/dana/fb/smb/swg.cgi

And our firewall logs show that no attempt is made by the VPN to access the file server.

I've restarted the VPN but that didn't help.  Any suggestions as to why this page will no longer load.

[zanyterp]

did you install the XML file per the recent security advisory?

[floriandrx]

Dear, I am facing the same problem.

Could you provide some more details on the XML file? Is this something that needs to be installed by the administrator or something to change on the client side?

Thank you in advance.

[floriandrx]

Dear, I am facing the same problem.

Could you provide some more details on the XML file? Is this something that needs to be installed by the administrator or something to change on the client side?

Thank you in advance.

[[email protected]-tsd.com]

We are experiencing the same issue.  I updated to 9.1R11.4 and then applied the XML file after another vulnerability was discovered and required disabling the "file share" functionality again.  It also seems to disable the Terminal Services functionality though I haven't seen that documented as being intended.

We have since updated to 9.1R11.5 and still have this same file share access issue and receive the message:

"Access to the Web site is blocked by your administrator. Please notify your system administrator. Made request for $request to $host:$port"

[rdumitrescu]

After you upgrade to 9.1r11.5 you have to remove the xml file applied previously.

In the download area of my.pulsesecure.net you can find the ps-pcs-sa-44800-remove-workaround-2105.xml file that needs to be imported in order to can use again the file browser feature.

Check the kb for all the details: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44800/