Pulse Secure client issues after January 3 Microsoft Out-of-Band security patch

[jdalyasc]

Environment

Windows 10 1709 fully patched including out of band patch KB4056892

Pulse secure 5.3.3 latest download from site.

After last nights microsoft updates I am no longer able to connect to our VPN using the pulse secure client. The error that gets returned is error 1308 "Authentication rejected by server"

I tried rebooting machine several times with no luck. I ended up having to remove the Microsoft patches that were applied last night to resolve the connection failure.

I know there are many issues being reported with these out-of-band security updates so I was hoping that you may have already heard of this issue and are looking into it.

[forza115]

Also having the same issue but with KB4056891 for Windows 10 1703.  Currently searching through debug logs to try and identify the problem.

[Ksmith]

I'm having the same issue with a few users. I think this may depend on the version of the desktop client however because I ran my updates on my laptop and am able to login with the desktop client. 

[ChazMan]

What is your IVE/VPN system? Connect Secure, PSAxxxx?

[zanyterp]

I have not heard of an authentication failure yet; however, I have heard of instances that the tunnel does not load successfully when split tunneling is enabled
If you have not yet done so, please open a case so we can track this with our development team

[Ksmith]

It's not even getting to the authentication. Two of my users had windows updates done yesterday and  then afterward they attempted for the first time to utilize the pulse desktop client. They installed properly however when attempting to connect and get prompted for thier credentials it continuously failed immediately with error code 1308. I pushed windows updates to another laptop that already had the desktop client installed and had been used previously and did not have issues after updates completed. Any idea why they would be experiencing this issue? 

[asllin]

Turn off host checker seems to work for now.

[Ksmith]

I can't turn off host checker, that goes against my security policy I've set for the organization. 

[sksksk]

Same here.   Wish I would have found this post before I surgically removed all pulse components from my machine.      Windows 10 1709 latest patches applied.   Any known fixes other than disabling host checker? (not an option for me)

[Sunnyjay]

It looks MS pushed out a few emergency patches for Meltdown and Spectre. Depending on your version of windows10, it will a different patch the above 2.

Microsoft has released a rare, out-of-band emergency patch for Windows 10 users. It should pop up and ask you to restart your machine so it can be installed, but if you have yet to receive such a notification, then head to Settings > Update & security see if there are updates waiting on the Windows Update page. If you are running Windows 10 version 1709 (Fall Creators Update), the patch you need is labeled Security Update for Windows (KB4056892).

For older versions of Windows 10, here are the patch numbers:

• Windows 10 version 1703 (Creators Update): KB4056891
• Windows 10 version 1607 (Anniversary Update): KB4056890
• Windows 10 version 1511 (November Update): KB4056888
• Windows 10 version 1507 (Initial Release): KB4056893

My Computer pulled KB4056891 and also broke Pulse VPN as well. 

Uninstalling the patch lead to disabling my wifi once the pluse was able to connect. Reinstalling all the Pulse components didnt work as well.