About akanoon

akanoon

Hi Dominik , Can you go to the connection, then click the "..." to get into the connection settings? Do you see Authentication as certificate? if you click into that, and then Certificate, do you see any certficates installed? Also, if you go to iOS Settings > General, if you scroll down after iTunes Wi-Fi Sync and VPN, you may see "Profiles & Device Management". Do you see any configuration profiles which contain the cert you want to use? If not, how did you get the cert on your device? Regards

akanoon

Can you share the "Advanced Connection Details" under File once you connect from your desktop? You may be connected but the tunnel type or encryption method may not be supported. It would also be helpful to include ipconfig (or ifconfig) output to see your IP addresses etc.

akanoon

Which browser are you trying this with? I've seen issues on Chrome. Can you please try a different browser?

akanoon

Hi Jan, If you jsut want to do it using PCS, you can create a single connection with multiple server URLs. Go to Users > Pulse Secure Client > Connections. Then to a connect set and scroll down to a connection and click it. You'll see the following: You can uncheck the first option that says "Connect to URL of this server only" and then add your server URLs in the second box. You can also configure some behavior using the next two options. Hope this helps. Regards

akanoon

This same exact question (same wording) was asking about a year ago. Is this the same issue? In that issue, one of replies says to wait a few minutes and it'll work. How long have you tried waiting before rebooting? We have no known issue like this so would like some more info.

akanoon

As noted in the doc, vTM is recommended if you're deploying an A/A cluster. You may need to buy a license. How many licenses do you need and where are you located? Accenture is a customer so you may already have most of the things you need. You can send me a private message and I'll let you know who we work with at Accenture.

akanoon

Hi Vinod, We do have a Pulse Connect Secure (PCS) appliance for AWS. You would get it and download it from us directly. We will be putting it in the AWS Marketplace soon. Documentation on how to deploy it is here: https://www.pulsesecure.net/download/techpubs/current/1221/pulse-connect-secure/pcs/9.0rx/ps-pcs-9.0r1-aws-deployment-guide.pdf Regards

akanoon

Has your admin setup location awareness and it is trying to auto-connect? This is a configurable option. If you have it configured and don't want it to work like that, you may need to talk to IT. They may have a reason for wanting it to behave like this, or it is just mis-configured.

akanoon

Is your IT team mentioniong other folks are seeing the same issue? I've attached a quick write-up on some troubleshooting steps. Can you also send your tunnel connection Advanced Details (File > Connections > Advanced Connection Details...)? Here's mine now:

akanoon · ‎07-12-2018

Have you installed any persistent routes on that system? You can do a "route print" to see if there is anything under persistent routes. Or, has the admin configured any split-tunneling rules that may be causing a conflict?

akanoon · ‎07-12-2018

Hi David, This is possible. Your admin would need to configure it - see https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB23343 Regards

akanoon · ‎06-29-2018

Are you seeing anything in the User logs? I am wondering if it is not talking to PCS at all, or if it talking to PCS but is not agreeing on how to connect. Do you have active support? If so, please call in and we'd be happy to help troubleshoot this issue. It's hard to proceed further without actually looking at what is going on. Since it's working on the WIn7 side, I don't think it's a config issue. We don't have any generic connection issues with Mac either so I'm sure it's a Mac-specific issue. Regards

akanoon · ‎06-28-2018

Hi rLuis, We have a KB on security best practices: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB29805/ Regards

akanoon · ‎06-26-2018

Hi Credim, the client has a hostchecker built-in but that only works for client-based connections. When you access the portal for Win/macOS, a separate dissolvable hostcheck agent gets installed and used. This isn't currently available on Linux. Regards

akanoon · ‎06-26-2018

Hi EoghanC, This may happen if your new provider, Vodafine, has ESP blocked. In that case, Connect Secure should be configured to fall back to SSL. This may explain why it works outside of home. Please check with IT. Regards

akanoon · ‎06-22-2018

Hi, have you updated your ESAP file? That would help. We are on version 3.2.6. See https://www.pulsesecure.net/techpubs/pulse-connect-secure/esap/3.2.x for details of what is supported. You can find the one for the ESAP file that you're using.

akanoon · ‎06-19-2018

Hi, I don't think this is possible without the client. You should open a case and request an ER.

akanoon · ‎06-19-2018

Pulse Connect Secure is for all enduser devices (Win, macOS, Linux, Android, iOS, ChromeOS, Window Phone, etc). I will send you a private message to get your contact info to help you learn more.

akanoon · ‎06-19-2018

Hi, if you're looking for a firewall, you'll need to talk to Juniper. The last supported client is 5.1. We have spun out as Pulse Secure since that release and do not officially support/test it with SRX for IPSec connections. If you're looking for a great remote access solution, that you can use Pulse Connect Secure. Please let me know if you want to learn more. Are you currently using the Pulse Client for anything other than connecting to SRX?

akanoon · ‎06-19-2018

Sorry, not sure what it is exacly but based on some reading, this may be related to AV (McAfee specifically). If you have McAfee, it is possible to try to disable it during install?

akanoon · ‎06-18-2018

Hi a.alex, Is this a new issue due to a recent change? 8.1 is an old release so I'm trying to understand what happened, or did you just notice this issue? Did you check the stuff mentioned previously in this thread, like split-tunnel, ESP vs. SSL, etc.? Is this happening on other machines, certain locations (home vs internal from corp), etc?

akanoon · ‎06-18-2018

Hi Smartd, You can use the 9.x client with 8.3, however, you'll need PCS 9.0 to turn on the ability to use the embedded browser for SAML. Here's the config snippet: This is the Connection Set client behavior part of the PCS config. You may be able to do it using a preconfig file, but you'd still need PCS 9.0 to generate the preconfig file. Regards, Ashur

akanoon · ‎06-15-2018

Please check out https://kb.juniper.net/InfoCenter/index?page=content&id=KB17660&actp=METADATA While the Pulse Desktop Client still includes connectivity options to the Juniper SRX, it's not actually supported by us at this time. You may be need to reach out to JTAC.

akanoon · ‎06-15-2018

Is possible that you're trying to install the 32bit version on Win7 64bit?

akanoon · ‎06-14-2018

When you log in to the portal, is there a Pulse Secure start option? This doesn't appear to be a client issue. I'm thinking you may just be getting a role that doesn't allow for client VPN connections, or there is no IP address Pool. Can you check with IT? If you have access to the admin console (and are IT), you'll need to check logs, etc.

akanoon · ‎06-13-2018

After looking into this some more, it seems that the message is when a user tries to do something or click on a bookmark after the session is already gone. Say they've logged into a browser portal session, leave it there, the session is gone on the server, but they try to click on a link anyway. On first click, it tries to go to the server, then it redirects to the signed out screen. Can you check with one of the users? Or, you can also check that specific users log in time and compare it with the time you see the message - it may be way passed the session time you have configured.

akanoon · ‎06-13-2018

Hi greenmoss, Are you sure that the server URL is correct and you aren't missing anything? You may be going to a sign-in policy that doesn't allow full tunnel VPN. Are you able to go to the URL and log in from a browser? Regards

akanoon · ‎06-12-2018

Also, you may want to ensure that you have session sync enabled in the Cluster Properties - see https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Configuring%20an%20Active%20Active.htm

akanoon · ‎06-12-2018

Hi nolanr, IP-based session persistance is very common and a recommended method. Can you share what you're using for load-balancing? Also, do you have any connection sets and session migration configured?

akanoon · ‎06-11-2018

There is a new GUI-based installer. Does your university have access to it? Please ask IT, they should be able to download it either from my.pulsesecure.net or directly from there Pulse Connect Secure device. Not sure what instructions you have for installation, but we have it detailed here: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40126

Re: Pulse Client on iPhone with Certificate Auth

Re: Pulse Secure not connecting with Home interne...

Re: Pulse secure terminal services client could no...

Re: GEODNS for Pulse VPN

Re: My internet connection hangs

Re: Need VPN for my AWS ennvironment

Re: Need VPN for my AWS ennvironment

Re: Pulse Secure Stopping from opening at startup ...

Re: Net speed drops 15-20 times when connected to ...

Re: Getting Error NC Route Conflict Detected

Re: Refresh Existing Connection

Re: Pulse secure from MAC

Re: PSA5000 Security Hardening guidelines

Re: For Linux does the client host checker work wi...

Re: Pulse secure from MAC

Re: Pulse Secure 5.2.9 (1161) Does not get past AV...

Re: Smart Card Logon EKU and smartcard preferences

Re: Windows 10, pulse connects but randomly won't ...

Re: Windows 10, pulse connects but randomly won't ...

Re: Pulse Secure 5.3 instalation error on Windows ...

Re: Extremely Slow Uploads From Network Connect Cl...

Re: Is there any issue using 9.x client with 8.3.x...

Re: Windows 10, pulse connects but randomly won't ...

Re: Pulse Secure 5.3 instalation error on Windows ...

Re: Suddenly stopped working, now "tunnel not enab...

Re: Load balancing multiple PCS for a mobile workf...

Re: Suddenly stopped working, now "tunnel not enab...

Re: Load balancing multiple PCS for a mobile workf...

Re: Load balancing multiple PCS for a mobile workf...

Re: PulseSecure Client Doesn't work with Ubuntu 18...