cancel
Showing results for 
Search instead for 
Did you mean: 

Pulse Secure session drops on Mojave. Somehow related to my home ISP

Highlighted

Pulse Secure session drops on Mojave. Somehow related to my home ISP

Howdy,
  I am using PulseSecure 9.1.6 on MacOS Mojave (10.14.6) connecting to my work VPN. I do not know what gear my work VPN is using on the server side.

  I can connect easily. My session will stay usable only for about 5 to 10 minute and then all traffic through the tunnel will stop (ping unreachable to basicaly anywhere in my work netwrok). During this time, the PusleSecure session stays "connected" and my mac0S interface, utun2, stays UP/RUNNING with a valid ipv4 address.
 A disconnect and connect always solves the problem. But it will show up again in another 5 to 10 minutes.
  If I take my laptop anywhere outside of my home (coffee shop, mother-in-law's house, use my phone as a hotspot...) Then I never have the session-becomes-unusable problem. So I know this is somehow related to my home isp (jrcomm+verizon:wireless/cellular).
   During the time my vpn connection becomes unusable, I have no problem connecting to anywhere else on the internet...so that implies my home ISP is working well. Hmmm...

  PulseSecure logs do show a change in pattern at the time-stamp-of-intrest boundary (12:06:41). But I don't know what this pattern change is implying....

----cut---
0146,09 2020/11/20 12:06:41.772 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 84 bytes UDP to 15.211.196.20:4500
00149,09 2020/11/20 12:06:41.899 5 root dsAccessService iveConnectionMethod p0058 t39407 dsio.cpp:628 - 'dsio' calling 0x7f875231cf70 IpsecUdpSocket SOCK 59
00150,09 2020/11/20 12:06:41.899 5 root dsAccessService iveConnectionMethod p0058 t39407 udp.cpp:671 - 'ipsec' Received 132 bytes UDP from 15.211.196.20:4500
00148,09 2020/11/20 12:06:41.899 5 root dsAccessService iveConnectionMethod p0058 t39407 esp.cpp:262 - 'ipsec' window advanced to 647/FFFFFFFF. no=00000001
00168,09 2020/11/20 12:06:41.899 5 root dsAccessService iveConnectionMethod p0058 t39407 ncIPSecSession.cpp:558 - 'ncAccessMethod' ncIPSecSession::sendToTun: 0x7f8757000820 84
00161,09 2020/11/20 12:06:41.899 5 root dsAccessService iveConnectionMethod p0058 t39407 ncSession.cpp:624 - 'ncAccessMethod' Received data 57000820 from server, len:84
00118,09 2020/11/20 12:06:41.899 5 root dsAccessService dsTMService p0058 t39407 packetImpl.h:146 - 'plugin' ipver=4, size=84
00132,09 2020/11/20 12:06:42.394 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 88 bytes from the adapter
00153,09 2020/11/20 12:06:42.394 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:42.394 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 132 bytes UDP to 15.211.196.20:4500
00149,09 2020/11/20 12:06:42.499 5 root dsAccessService iveConnectionMethod p0058 t39407 dsio.cpp:628 - 'dsio' calling 0x7f875231cf70 IpsecUdpSocket SOCK 59
00150,09 2020/11/20 12:06:42.499 5 root dsAccessService iveConnectionMethod p0058 t39407 udp.cpp:671 - 'ipsec' Received 132 bytes UDP from 15.211.196.20:4500
00148,09 2020/11/20 12:06:42.499 5 root dsAccessService iveConnectionMethod p0058 t39407 esp.cpp:262 - 'ipsec' window advanced to 648/FFFFFFFF. no=00000001
00168,09 2020/11/20 12:06:42.499 5 root dsAccessService iveConnectionMethod p0058 t39407 ncIPSecSession.cpp:558 - 'ncAccessMethod' ncIPSecSession::sendToTun: 0x7f8757000020 84
00161,09 2020/11/20 12:06:42.499 5 root dsAccessService iveConnectionMethod p0058 t39407 ncSession.cpp:624 - 'ncAccessMethod' Received data 57000020 from server, len:84
00118,09 2020/11/20 12:06:42.499 5 root dsAccessService dsTMService p0058 t39407 packetImpl.h:146 - 'plugin' ipver=4, size=84
00132,09 2020/11/20 12:06:42.739 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 88 bytes from the adapter
00153,09 2020/11/20 12:06:42.740 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:42.740 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 132 bytes UDP to 15.211.196.20:4500
00149,09 2020/11/20 12:06:42.898 5 root dsAccessService iveConnectionMethod p0058 t39407 dsio.cpp:628 - 'dsio' calling 0x7f875231cf70 IpsecUdpSocket SOCK 59
00150,09 2020/11/20 12:06:42.899 5 root dsAccessService iveConnectionMethod p0058 t39407 udp.cpp:671 - 'ipsec' Received 132 bytes UDP from 15.211.196.20:4500
00148,09 2020/11/20 12:06:42.899 5 root dsAccessService iveConnectionMethod p0058 t39407 esp.cpp:262 - 'ipsec' window advanced to 649/FFFFFFFF. no=00000001
00168,09 2020/11/20 12:06:42.899 5 root dsAccessService iveConnectionMethod p0058 t39407 ncIPSecSession.cpp:558 - 'ncAccessMethod' ncIPSecSession::sendToTun: 0x7f8753828820 84
00161,09 2020/11/20 12:06:42.899 5 root dsAccessService iveConnectionMethod p0058 t39407 ncSession.cpp:624 - 'ncAccessMethod' Received data 53828820 from server, len:84
00118,09 2020/11/20 12:06:42.899 5 root dsAccessService dsTMService p0058 t39407 packetImpl.h:146 - 'plugin' ipver=4, size=84
00132,09 2020/11/20 12:06:43.203 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 67 bytes from the adapter
00153,09 2020/11/20 12:06:43.204 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:43.204 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 116 bytes UDP to 15.211.196.20:4500
00132,09 2020/11/20 12:06:43.399 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 88 bytes from the adapter
00153,09 2020/11/20 12:06:43.399 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:43.399 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 132 bytes UDP to 15.211.196.20:4500
00132,09 2020/11/20 12:06:43.744 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 88 bytes from the adapter
00153,09 2020/11/20 12:06:43.744 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:43.744 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 132 bytes UDP to 15.211.196.20:4500
00132,09 2020/11/20 12:06:44.209 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 67 bytes from the adapter
00153,09 2020/11/20 12:06:44.209 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:44.209 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 116 bytes UDP to 15.211.196.20:4500
00132,09 2020/11/20 12:06:44.404 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 88 bytes from the adapter
00153,09 2020/11/20 12:06:44.404 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:44.404 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 132 bytes UDP to 15.211.196.20:4500
00132,09 2020/11/20 12:06:44.749 5 root dsAccessService dsTMService p0058 t38F13 packetImpl.h:210 - 'plugin' Read 88 bytes from the adapter
00153,09 2020/11/20 12:06:44.749 5 root dsAccessService iveConnectionMethod p0058 t38F13 ncIPSecSession.cpp:398 - 'ncAccessMethod' ncIPSecSession::sendData: 0 1
00147,09 2020/11/20 12:06:44.749 5 root dsAccessService iveConnectionMethod p0058 t38F13 udp.cpp:611 - 'ipsec' Sending 132 bytes UDP to 15.211.196.20:4500

----paste----