tcp dump on the ex switches only has access to control plane traffic destined to local routing engine.   You would need to use a port mirror for the capture. https://kb.juniper.net/InfoCenter/index?page=content&id=KB10878   ... View more

Craig,   If you select the rate this article on the kb on the Juniper site.   You will get an add comment box.  There you can type a note that will be automatically sent to the author of that kb article.     You can potentially contact the right people that way.  It has worked for me in the past.   ... View more

The coverage is most vendors but does need to be kept up to date on the server side.   If you are the administrator update and activate the latest ESAP file.  Or request that the admins for the Pulse appliance do so.   ... View more

I'm not sure if the support is official or not.  But I have used vmotion on the virtual appliance versions moving them from one vmware cluster member to another during maintenance and upgrades.   I don't stretch clusters between datacenters however.  And run two separate appliances on different clusters in the two locations to avoid all shared fault domains.  this does require manually keeping changes in the the configurations in sync.   ... View more

What do you mean exactly by disconnect the internet connection?   There is a feature called no split tunnel that can be enabled on a pulse appliance.  This forces the client to send all internet traffic up the VPN.  and if not fully configured correctly this can look like loss of local internet or make the local internet painfully slow.  Perhaps this is on?   ... View more

Nice work.  This has been a long standing inconvenience in updating clients.   ... View more

This is part of the host checker pre-connection security checks.  The administrator of your pulse server is requiring an active AV program.  Since Norton is a supported AV for detection purposes likely you have a version newer that the detection file on the pulse server.   You will need to ask your pulse server admin to update the ESAP file on the server to detect this newer version correctly.  If it is already on the newest ESAP than the pulse admin will need to open a support ticket for the issue to be fixed.   ... View more

Tickets are opened in the support portal by pulse server admins with active contracts.  They can also use the download center here to get the update ESAP files for loading in the appliance.   https://www.pulsesecure.net/support/   ... View more

Could you go somewhere with public WiFi and confirm if the problem occurs there or not.  This will help determine if the issue is with some issue on the laptop or the home network.   When doing a failed connection change your local pulse client logging to detailed.  Then save out the log after the session exhibits the behavior.  This should give more details on why the drop and connect is occuring.   ... View more

If you are the administrator on the Pulse secure applicance then download the newest ESAP file and activate it for the host checker usage.   If this does not clear the error, a support ticket would be needed to add support for the new version.   ... View more

Well the basic pulse secure appliance psa300 would cover your use case.   https://www.pulsesecure.net/psa-series/tech-info/   The client side is very simple and managed by the admin from the appliance side connections. Or can be deployed via active directory group policies if you are a windows shop.   The initial setup and design of the remote access appliance can be as simple or complex as you want.  The platform is flexible.  So you might want a VAR to help with consulting time for an initial setup and install if you don't have strong network, server and security skills.     ... View more

Sounds like  a bug.  The main way to get updated program loads is from the adminisrator of the appliance you connect to.  Contact that help desk and let them know the version of your windows and pulse client.  They can also verify they have the host checker updated on their end.   They can provide you with an updated installer either directly or via an appliance download.   ... View more

Please click through on the certificate error you get on the client.  This will list one of three reasons why the failure occured.  We need to know which one to proceed.   --expired certificate date --mismatch in certificate name to the URL used by the pulse client --unknown / untrusted certificate authority   ... View more

The appliances can only be managed from the web interface.  Initial setup and some basic options are available via the console port.   ... View more

Sounds like the windows update may be incompatible with your current version of the pulse client.   Open the full pulse client try and let the connection fail use the logs option to save out the logs for the connection attempt   Then contact the help desk for the company that installed the pulse gateway you are trying to connect to with the information.  They can get you access to an updated client software to install or based on this data provide an auto upgrade directly on their appliance for clients connecting.   ... View more

There is probably some routing overlap between the two vpn connections.  The subnets for the utilities you have problems with likely exist on both company networks so cannot be connected at the same time.   Unfortuately, which subnets route across a vpn is a configuration option for the company that sets up the vpn not the end user.    ... View more

You are getting this message from the "Host Checker" feature.  The specific rules here on what type of device is allowed to connect are setup by the IT group that runs the specific Pulse secure applicance you are connecting to.   It appears that IT group has chosen to deny access to any Apple OSX device.  You will need to open a ticket with their help desk and request they allow OSX connections.  Pulse Secure and host checker does support this but your particular team has chosen to deny the access for their own policy reasons.   ... View more

There are no nat or proxy abilities on the pcs for layer 3 connect traffic.  You have to assign an address pool for the connected users and these pool addresses will be what is used by the pulse secure connected devices for internal access.   ... View more

These are rules configured by the System Administrator of the particular Pulse Secure gateway you  are connecting to.  The message you have is the generic message that you have failed the check without any customization by the System Administrator to let you know why.   The specific reason will be in the logs.   You will need  to contact the System administrator or open a help desk ticket with the particular company running that portal.  They can then determine why you do not meet their minimum connection standards and tell you what you need to do to the system to meet those standards.   ... View more

I use pulse secure on OSX Macbook to a tethered verizon phone occasionally after hours support.  I have not had any issues connecting and staying connected.   Less often I used the pulse client directly on an older Samsung galaxy tablet directly to check on devices and status for after hours tickets while remote also on Verizon.  No issues here either.   Pulse will try to connect esp where possible for a better connection.  But I have seen some carriers (ATT in the USA is one) that block that protocol unless you buy a "business" package.  But the pulse client will cleanly fall back to ssl connect in that situation.    When you can connect esp the performance is noticably better which may be why people switching from anyconnect experience a boost.   ... View more

Yes the networks that are created by the virtualization software could cause a problem if the subnets the software chooses are also part of your corporate network tunnel and overlap.   You can do a route print on both computers to see what the subnets are.  And if they allow you to turn them off see if it works without them running.  I think the vmware one starts up automatically even when you are not running VMs actively.   ... View more

This is a Citrix terminal server error message.  This means your Citrix client installed is either not the correct version, not fully installed or otherwise not compatible with MacOS X High Sierra.   Your best bet is to contact the Citrix team for the server you are trying to connect to.  They should be able to get you a compatible version link to download a dmg from Citrix for their setup.   ... View more

I think the test between the two PCs has ruled out their theory of the esp transport issue.   Seems pretty likely there is some software conflict on that one PC.   ... View more

Thanks for the update.  It would have been a long time before I suspected a printer driver.   But forgot to ask the important first question, anything new installed on this computer?   ... View more

Yes, these virtualization platforms create virtual networks inside your PC.  If they choose a network that overlaps your resources used on the vpn this could cause the error you are getting.   In a dos window do a route print to see what networks on on the PC.  Your help desk and let you know if there are any conflicts.   ... View more

As akanoon is noting, the limit on this session is a choice by the pulse secure system administrator.  If you work requires a different value you can open a ticket with your help desk asking for that setting change and why you need it.   These limits are generally put in place to prevent people from consuming a license and never logging out.  And also for a security reason not keeping things logged in to sensitive data when people are clearly not actively using the computer so an authorized person getting physical access would.   ... View more

What are the differences between the two computers that can generate routes.   For example installing vmware workstation or fusion can create local route subnets.  You are looking for routes on this computer that are needed in your split tunnel to the remote network.  This would be what is causing the conflict.   ... View more

Sorry for not being clear.  Recent updates to how Windows 10 handles network drivers breaks the Pulse secure application.  So if you are having problems you likely need a newer version.   If you are the pulse secure administrator you download the new client packages for loading on your appliance and clients here.  Only licensed purchasers have this option. https://my.pulsesecure.net/   If you are an end user, contact your help desk at the company you are connecting to for the Pulse secure VPN.  Ask them to load the newer clients on their appliance that can auto upgrade your computer.  Or give you the download link for the newest version from their appliance.   ... View more

I am not sure I am interpreting the question correctly so forgive if this is the wrong direction.   We use the client to establish tunneling connections from the user computer to the network.  It sounds like you only need to publish web sites from the internal network for external user use.   If that is the case you do not need the client install at all.  You simply add your internal web sites as web resources in Pulse.  Then your users will connect to the pulse server using the web browser going to the url you setup for the pulse server directly.  Once they log in from the web browser they will be presented with their allowed web resources in the browser.   The installed client is not needed at all for web application only deploys.   ... View more