Thanks @zanyterp , in the end, I used Intune to uninstall Pulse 9.1.10 before installing 9.1.11   I might try and use the "taskkill Pulse*" in the script and see if that works. It would be good if we didn't have to though. ... View more

Hi @ri1 , no, the inital response was that it was something on my side. I then sent them logs showing it failing to install when Pulse is running and working fine when Pulse was stopped. Nothing back so far. ... View more

Ah,   So this is what is causing it to not install. The Juniper Networks is an old folder and doesn't exist anymore, so at the very least it should have a catch for this and ignore it. I have logged a call with support. Just feels like Pulse is rushing too much now with the secuirty issues.   Product: Pulse Secure -- Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action exe_def_StopAllPulseProcesses, location: C:\WINDOWS\Installer\MSIF439.tmp, command: /Stop /ProcessName pulse.exe /FilePathToRun "C:\Program Files (x86)\Common Files\Juniper Networks\JamUI\pulse.exe" /CLIArgsForProcess -stop ... View more

Nevermind. Seems to be working fine now. ... View more

Hi @zanyterp just to confirm this isn't expected behaviour   Pulse Desktop Client SAML authentication to Azure Embedded browser. Inital connection is fine.   When I select "extend session", a box will appear telling me that I have an existing session open. I am still connected to the VPN tunnel while this box appears.   If I select "continue", the VPN tunnel will be disconnected and a new session is created - this is not expected behaviour?   Just to make sure before I log a call.   ... View more

Thanks @zanyterp , yes it seems to be the case that when extending a SAML connection using embedded brower, the connection is dropped first and the reconnected.   Will check with support. ... View more

Thanks @rdumitrescu , that makes sense.  I really wish there was a suggestion box feature here, or through mypulse, as this would be a feature I'd love to get working.  ... View more

We use a machine cert from our Active Directory Certificate Services. The cert is installed when a machine joins our on premise domain.    If you're using Azure, are you also using Intune? We're testing authenticating against Azure using Conditional Access policies and compliant devices. ... View more

Thanks @myPulseSec , in a strange way, it's good to see that someone else has the same problem.  ... View more

Hi r@yElr3y Yes. We created a new config file to ensure all staff members will use the same one.   After this, future Pulse Client installs won't need to use the preconfig so the issue shouldn't happen.   It would be great if we could force a connection set onto any device (base on role/realm), that connects to the PSA, rather than needing to configure the client. It's an odd design choice.   ... View more

Hi r@yElr3y , no. I suspect the issue is the preconfig file. If we do a normal update via the PSA, afaik this will update the Pulse Client but not touch the connections.   If I use Intune and push out Pulse with no preconfig file, the system doesn't require a reboot. So it seems that the preconfig file is the one which needs the Pulse service at least to reboot?   It would be brilliant if that could be factored in during the install. ... View more

Just wondering if there was a solution to this. if we deploy using Intune, even with the no restart option, it looks like the Pulse service needs to be restarted before it will see the configuration file.   It definitley picks up elements of the config file because the test users can't create connections. ... View more

Thanks @zanyterp for your assistance in any case. We have sent logs to the support team so hopefully they can help. Yes, it would be nice to perform upgrades per roles, which would allow us to test a smaller number of people for issues.  ... View more

Thanks. if we manually install it, we expect an administrator/UAC prompt which doesn't help.   It's a pity we can't assign an upgrade to select users for testing though ... View more

Thanks. Do you know if it's possible to upgrade a subset of users for testing? Normally it would just try and upgrade all users who didn't have the latest version of the client. ... View more

Thanks for that.   We don't want the VPN to start automatically after login because we wouldn't have (or need) enough licences for every user that connects. ... View more

Thanks @kita but this doesn't seem to work   Manual install, no preconfig Install Pulse Desktop Client  Role set to use that connection Connects Nothing updates and connection.dat doesn't show any type of binding at all.   I could be missing something though. ... View more

Hi @gb2939 , thank you for that. This seems to match everything that I've read.   It's hugely fustrating that we can't force client to be binded to the server that way. ... View more