About rvandolson

rvandolson · ‎04-14-2021

So did you: Upgrade PCS (appliance) to latest version Disable "auto upgrade" Instruct your clients to uninstall the helper components Instruct your clients to then reattempt connecting to the web interface so new helper components get installed ?

rvandolson · ‎04-14-2021

I think he's stating his clients didn't have impact because they launch PDC directly rather than via the web. We would like to return to allowing web access as an option, but avoid needing to manually touch or talk to 3000 users. I wonder if there's a way to teach web browsers to trust the older helper components explicitly so the uninstall/upgrade process can happen automatically.

rvandolson · ‎04-14-2021

We'd like to know this as well. Awkward experience for users otherwise and very high touch for our front line support staff.

rvandolson · ‎04-14-2021

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44781

rvandolson · ‎04-13-2021

How are all of you handling this to make it as low touch as possible for your user base? We have 3,000+ users and rely on both Host Checker and the Application Launcher. We support connecting via a web portal (SSO) and directly (most everyone is using this as a workaround now of course). The 'fix' process seems to be: Upgrade PSC Server to 9.1R11.3. Clients connect and get new client automatically. Clients must now run uninstall script (we have a custom one since the script provided by Support in the KB only uninstalls the application launcher and has other bugs) Now clients can reconnect and will get the updated, properly signed helper executables. Above is pretty wonky and not user friendly. We're thinking we could perhaps use SCCM to push out the new client and helper components, but presumably we end up in a race condition then with the new clients connecting to the old server (we're on 9.1R11) and getting forced to the old helper components again. How do we best avoid having to hand touch each of our users?

rvandolson · ‎03-23-2020

We have a PSA-7000V but are hitting ACL limits. The VM itself has plenty of excess memory and CPU power. Is there no secret way to up the ACL limits? Simplifying our ruleset is an obvious alternative of course.

rvandolson · ‎03-19-2020

We've been told that you can upgrade in place. You will have to reboot to add the necessary cores and memory, however.

rvandolson · ‎08-21-2016

Have any of you found a successful model for managing granular permissions for users at scale (1500+ users)? We use AD groups, but they've mostly sprawled out of control and it can be challenging to at-a-glance understand what Role/AD group leads to what layer 3 access. Introducing more discipline and oversight into the process might help, but I'm thinking others may have found a better, more scalable way. Have also considered offloading the access decisions to the firewall layer leaving the Pulse box mostly to handle tunnel termination and authentication. What have you found works?

rvandolson · ‎02-12-2016

I'm working on a script to audit roles & rules. I'm checking for rules which reference groups (AD based for us) which are no longer valid. I can also check for roles which have no rules which reference them. Am doing this by parsing the XML dumps of the rule/roles databases. I'd also like to be able to check for the last time a role was used. Currently it seems like I need to use the user connection log which contains a username and the roles that user had applied to them. Doable, but the log is very large (300MB for us for just a 48 hour period). Is there a more efficient way I should be tackling this? MAG-4610 appliances. I'll go search now and find out there's a RESTful API which has calls to the things I'm after and my XML and log parsing has been a waste of time. :-)

Re: Question about the code-signing issue

Re: Question about the code-signing issue

Re: Question about the code-signing issue

Re: Pulse Secure App Launcher Unexpected Internal ...

Re: Post-9.1R11.3 upgrade client-side steps

Increasing ACL maximums?

Re: Upgrade Virtual PSA5000V to PSA7000V

Managing permissions at scale...

Auditing.