@SB_1995, yes, the pulse setup client is not something you will see launch are you seeing it loaded in your task manager? ... View more

Hey KAS,   You seemed to put a lot of effort into this, did you come up with a solution?  Really curious as this is affecting us in a bad way.  We use FortinetSSO and the multiple entries in DNS are causing havoc withour staff.   THanks ... View more

Hi,   That  is from netconf specification https://datatracker.ietf.org/doc/html/rfc6241#section-4.1   The <rpc> element has a mandatory attribute "message-id", which is a string chosen by the sender of the RPC that will commonly encode a monotonically increasing integer.     ... View more

Hi,   That is something how manage your connection decided to apply to your installation.   Therefore, or you call them to see what can be done in your case, or you are requestion our help to overcome something the administrator wants to impose to you.   Best Regards, Filipe ... View more

Thank you for the response!   So we have multiple multiple seperate clusters and use DNS to control what boxes are able to serve clients. Assuming we dont care about all cluster nodes going down at the same time, would we be able to just reboot all cluster boxes at the same time without breaking anything?   Thank you again for the help! ... View more

Got a similar issue. In Bitdefender -> Privacy -> Anti-tracker -> Settings : I deactived It for the browser that I use with Pulse. (Edge in my case) Then I did a reset of the browser to its initial settings (in Edge -> Settings -> Reset settings.) And Pulse connected just fine aftwerwards. ... View more

Thanks! That worked.   I created a new pulsepreconfig file using the user-connection: "false" flag and that removed all manual entries after restarting the application.   Additionally, when I re-ran the pulsepreconfig import using a file containing user-connection: "true" it restored the ability to create\edit\remove profiles without restoring those that were previously removed.   It's a bit of a roundabout process but it works, and works well.   Thanks again! ... View more

if it uses RADIUS, it should be successful there are also changes in 9.1R11 that enable additional FIDO access (client platform-dependent) if you have not already investigated this option, i would recommend reviewing the changes ... View more

no, it will use only the default ... View more

it will warn if a realm is explicitly being used in an authentication policy it will warn if a role is explicitly being used in a resource policy ... View more

Those are pictures, not .vss Visio Stencils. ... View more

were you using SSL transport or ESP transport when on wireless? though, i am glad to hear it was resolved and you can connect successfully with reasonable speed ... View more

Hello,   Where can I find  PDC 9.1R8.2? The email which is sent to download the clients is still pointing toPDC 9.1R8.0 - ps-pulse-linux-9.1r8.0-b165-centos-rhel-64-bit-installer ... View more

Hi @xqno    That is just a gtk module which can be installed with apt install libcanberra-gtk-module but that is a GTK theme and can be ignored.   Probably you miss this from README file Launch UI from the terminal: 1) Append /usr/local/pulse to LD_LIBRARY_PATH example: export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/pulse 2) Launch the UI by executing the below command /usr/local/pulse/pulseUi It is better to lauch Pulse Secure via Activity Manager in Gnome.   ... View more

Best you can do is doing a snapshot of your VM before upgrading. If anything goes wrong, you can just roll back. That saved me a couple of times. Also backup all configs. ... View more

Hi @amjad.ra2    You can create an expression to be used during the role mapping. We are using this one, associated with a stop rule in the begin of the role mapping. Explanation: user of LDAP group block_0030_0800, and time between 00:30 to 08:00   groups=('block_0030_0800') and time = (00:30 TO 08:00) If you what at 11PM the VPN Session be disconnected, you must Enable dynamic policy evaluation at realm level.   I hope it helps.   Best Regards, ... View more

Hi,   As admin of several PSAs, I also had many complains from my users. After we apply method #1 of KB43833 the complains drooped significatly.   Excluding bad capacity management on VPN servers or bad management in general, at client side there also many other places to search for issues: CPU consumption - encryption is computationaly heavy, so if your CPU is already overloaded, VPN traffic will drop Buggy Wifi Drivers - Not always the lattest wifi drivers is the best option Then, you also need to check, if your traffic will use web proxy or not.   If you are using an ISP, remember they also apply network traffic engineering (or traffic shapping if you like).   At this moment, in my home, I get this download (upload) speeds using Wifi: WithOut VPN: 42Mbps (10Mbps) With VPN: 39Mbps (8Mbps) In Linux, using ESP, via speedtest.net servers.   Is this software perfect: no. I just want to raise awareness about other places there the problems can arise.   In the end I just wish that PS: remove legacy stuff for SRX from PDC. If some clients need it, have a special version for them, or add a switch to install legacy stuff if needed, and not to everybody; have some way to test throughput against VPN server with and without tunnel ... View more

@amjad.ra2 Please open a support ticket with us. Pulse Client logs are stating the host checker evaluation is not consuming much time, hence this might require additional debugging. ... View more

Can you upload and set the 9.1R7 client as active for PCS 8.3R7.1? Yes Will that upgrade the installer service on the client? no; that will need to be installed separately by the desktop team ... View more

@flipPipe Yep... you got it :)  ... View more

This feature was not deprecated, just wasn't working as expected and not documentated in newer releases.   At least in version 9.1R7, this features is working again, check PRS-382777.   In new documentation, it is not documented how this works, but take care, because as in release 7.4, client IP is just showed in 3 message IDs   AUT24326 (user and admin login) AUT20919 (user roaming) ADM22896 (admin roaming) and do not substitute sourceip variable.   The new AUT24326 should have the text Primary authentication successful for <user>/<auth server> from <LB IP> forwarded for <client IP>     ... View more

Hello,   Have you tried to connect, without installing Pulse VPN client, but using Fedora native VPN client?   Select "Multi-protocol VPN client (openconnect)" which is compatible with Juniper / Pulse, then "Juniper Network Connect" protocol.   It works fine for me. Hope this helps. ... View more

@zanyterp Any suggestions? ... View more

I am having this issue as well. I am running 9.1.5.   The users have full tunnel access with an address which is visible on the connected PC but not showing in "Active Users" This happens randomly .   Another bug in the endless stream of issue with Pulse ... View more

You can block it with a external firewall that uses regions/countries in the rules. But as @flipPipe said, a vm could be created in a cloud provider of your region and the connection won't be blocked. ... View more

Article KB21481 explains how MTU is calculated. ... View more

It does allow, I'm using tcp in a non standard port   Also, there is some bug fixed because of this feature. https://www-prev.pulsesecure.net/download/techpubs/current/1419/pulse-connect-secure/pcs/8.3rx/ps-pcs-sa-8.3r7-releasenotes.pdf And search for syslog. ... View more

60k ACL is total number of tunnels established, not per user :)   My experience, says until 120k, there is no big problem :) ... View more