What versions of Pulse and 8.1? There were issues with SAML as an auth server; the known ones are resolved in the latest Pulse 5.1 and PCS 8.1 versions. If you are continuing to see difficulty, please open a case. ... View more

There are currently no threat intelligence feeds on the appliance; please work with your account team for help with the product team to have this investigated ... View more

On the newer version of software, the PSA supports more users as the maximum count. The PSA has the option of fiber connections. The PSA are all standalone units and are no longer blade-based ... View more

Please reach out to your account team to work with the Pulse Secure product and security teams for investigation on this ... View more

Hi Marc, No, it is not possible to create an SSO POST for these rules. However, it may still work if you create the rule with the other settings in place. I have seen where the dynamic value does not need to be sent by the PCS' POST rule and it will still connect. ... View more

I would recommend opening a case. That sounds like an issue we resolved in early 5.0 or 5.1 releases If you are still seeing it, unfortunately, it sounds like there is a case we were not aware of to test. Please open a ticket to work with our support team. ... View more

I do not believe iOS has a way to configure an always-on rule; I would recommend checking with AirWatch for that. You may be able to simulate that by setting the Safari domains to be sites users will typically have open/reach out to (e.g. google.com) or you may be able to set a domain-based rule to always connect for your email server (if you allow ActiveSync). ... View more

Are you seeing those requests go out the VPN interface or the local? does this happen with both shortname & FQDN queries/attempts? ... View more

Machine authentication &/or credential provider allow this to happen. I would recommend machine authentication and then move to a user tunnel after login completes ... View more

It _may_ be possible to achieve this if the client is 5.2 and the server is 8.2; however, the enhancements need to be on both the client and server to work What versions are you using? ... View more

If you login through Pulse, does it work? Launching through a browser is only supported on Safari; but using Pulse is more efficient (especially on newer Mac OS X versions) ... View more

Network Connect is not supported on El Capitan (or anything after Mountain Lion). Do you have any systems that do not have an IVS licenses installed that you can have your Mac users connect to for Pulse connections? ... View more

Licenses cannot be shared across appliances. If you are using a license server, a client can ask for more if needed and the server will lease them if there are licenses available from the unreserved pool; but it will not be able to reduce the reserved count from a system that does not have that number of users on it. ... View more

I want my users to launch the client , I want the client to check for a cert, and if they have the cert I want them to be prompted to login with id/password. If they dont have the cert I want it to fail. Is there a way to do this without Host Checker ? >>>Yes. You can set it up in one of two ways The first way is to use a certificate restriction on the realm set to required; if they don't have the certificate, they don't see the login page. The second way is to have the primary auth server on your realm as certificate and the secondary as your username/password provider. Without the client auto-logging them in at boot ? >>>Can you expand on this further? The client will always launch when the user logs in and, depending on your configuration, may attempt to authenticate immediately or will wait for the user to manually attempt the connection. It does not require credential provider. Is hostchecker still a major hassle ? All I remember is that it constantly caused errors during auto-installation or upgrades. >>>It depends on what you are doing. If you are doing custom checks there is typically minimal hassle; if you are using the OPSWAT-based checks, the risks are the same now as they were previously. ... View more

The Windows Phone client does not support SRX connections When you configured the connection in the Pulse UI on Windows 7, what was the connection type you enabled? If you did not choose the SRX/firewall type, it will not be able to connect. Also, as an FYI for planning, the dynamic VPN feature for connecting to the SRX from the Pulse Secure client will be deprecated in an upcoming release. ... View more

What version of the Pulse Secure desktop client are you using? Windows 10 support is available only with 5.1R4 and higher. ... View more

Thank you for letting us know what the solution was ... View more

I am sorry you have not had a good experience with the Pulse Secure support team and reaching out to us for further information. In order to obtain new versions of the Pulse Secure client, you will need to open a case with Juniper and let the SRX team that you need to have them open a case with Pulse Secure to get the Pulse Secure client. I am not sure if they have the process in place on their side; however, that is what is needed. As a head's up in your planning, the dynamic VPN connection from the Pulse Secure client to the SRX will be deprecated and no longer available in an upcoming version of the Pulse Secure client. The authorization code is a right to use code that allows download of software for Pulse Secure customers. It is available by purchasing a Pulse Secure appliance and support. ... View more

Yes, that is correct: you cannot reach the management port over a VPN session ... View more

Is it only 10.10.5 showing this? I would recommend a case so that we can look at it more in-depth ... View more

That does not sound like something we have seen yet Is this on all versions/devices or only Samsung-specific in your testing? ... View more

Do you see it happen twice (once for ActiveX and once for Java) or only once? If you remove the existing setup client (either Juniper Networks or Pulse Secure) does the issue resolve when you next reconnect? ... View more

What version of the software are you using? Host Checker has been supported on the Mac since 5.0; however, the Cache Cleaner and SVW elements of Host Checker are not available on non-Windows platforms. Host Checker is available, as previously mentioned, only on iOS devices using the Pulse Secure client. Network Connect is not supported on Mac OS versions >= 10.9; however, 10.8 users should be able to launch Host Checker and Network Connect successfully (as long as they have allowed Java to run and set the permissions in the Java preference pane to allow the site as an exception). ... View more

No, there is not. Those are the only ones available ... View more

Is the site in trusted sites? Does toggling that value change behavior? ... View more

This specific one is for the Pulse Connect Secure (previously SA/IVE); the Pulse Policy Secure (formerly IC/UAC) is at: https://forums.pulsesecure.net/topic/pulse-policy-secure. ... View more

You are welcome; good luck! ... View more

I can't comment on when/if it will be supported; but yes, the user records management feature with a maximum record limit and automatic purging ... View more

I am not aware of a way to have a laptop act as a hot spot. More importantly, as braker & kita indicated, this is not expected to be supported (either corporate or support-wise). ... View more

Unfortunately, the only way to get the list is through the account team at this time. ... View more