We do not use or want the Cloud App Visibility agent that comes bundled with the PulseSecure desktop client.
It appears this is started by the Pulse Secure Service, and cannot be controlled independently. There is nothing in the Client Admin Guide about this process at all.
How do we disable/remove this process, and prevent it from being installed in the future?
Solved! Go to Solution.
CAV is the proxy component which gets installed as part of the Pulse Client, as it is packaged with the Pulse Client installer.
Not sure if it is possible to remove it.
In the config file (access.ini) the folder location # C:\Program Files (x86)\Common Files\Pulse Secure\JUNS\access.ini
there is section for CAV as shown below. We need to change Start Type from ‘Auto’ to ‘Manual’, the cav.exe won’t be started by Pulse service.
You can include this file modification request during the time of creating a new application package request with the packaging/deployment team.
If the PCD client has been pushed to all the machine base, then check the feasibility on your side to push/deploy this file using SCCM or any similar tools, followed by ‘Pulse Secure Service’ service restart(or machine restart), the CAV won’t start i.e. functionality will be disabled.
Hope this helps.
I made this change but a netstat -ab output shows that cav.exe is still directing traffic. Any other ideas?