Both features are not used by checking Users, Pulse Secure Client Connections.
Always-on Pulse client - Value is untagged. VPN only access - Value is untagged.
I am facing 1-2 minute(s) waiting to connect with Pulse Secure Desktop Client-9.0R3.2 Software (Build 1667) and Client-9.0R3.3 Software (Build 1667). I have installed Pulse Secure Desktop Client-9.0R4 Software (Build 1731) today, maybe it behaves differently.
users>user roles>rolename>vpn tunneling ... yes, this is tagged and being used.
Under the VPN tunneling settings, please check if "Traffic Enforcement" option enabled for IPv4/IPv6.
users>user roles>rolename>vpn tunneling>options>traffic enforcement ... yes, IPv4 is tagged and being used. IPv6 is untagged.