On the Pulse configuration set, please make sure that the option to allow override is disabled AND that the option to reconnect at session timeout/disconnect is enabled. This will prevent the user from manually disabling the session and, in the event of a network hiccup, connect automatically when the network connection is restored