About jonchill

jonchill

Yesterday I logged a call with Pulse support and after sending logs and traces etc got a response from them this morning (below) and its looking like a Pulse client issue, hopefully the latest client will resolve the issue but I'm still not sure why all of a sudden all of our Windows 7 laptops over the course of a week got this exact same issue, interestingly up until now our Windows 10 laptops with the same client aren't having the same issue. My only thought is that the Jan MS updates we're rolled out first week of Feb and whether for some reason one of these patches triggered an issue in the client. I have verified the given logs and confirmed the below events, when the Authentication is getting failed. Initial connectivity to the PCS device is established, and the Certificate on the user machine is also found, however post then we are getting "Processing EAP-Failure" 00167,09 2019/02/13 14:34:49.220 3 SYSTEM PulseSecureService.exe eapService p2184 t1F28 EapService.cpp:70 - 'eapService' Processing EAP-Failure: code = 4, id = 15, length = 4 00186,09 2019/02/13 14:34:49.220 1 SYSTEM PulseSecureService.exe iftProvider p2184 t1028 channelProviderImplEap.cpp:410 - 'iftProvider' EAP Authentication FAILED: Error: 1319 0x527 State: 3 0x3 00151,09 2019/02/13 14:34:49.220 1 SYSTEM PulseSecureService.exe iftProvider p2184 t1028 channelProviderImplEap.cpp:432 - 'iftProvider' Eap failed 1319 0x527 Since it is Realm level restriction which is failed, so the Policy trace doesn't capture the informations. I would suggested you to test by installing the latest Pulse Client version 5.3R7 or 9.0R3 on any of the affected machine and confirm the behavior

jonchill

Ray We're not seeing auth unreachable messages in the Events log and the AD admin have come back to us to say that they aren't seeing any issue with the AD servers. One thing we have noticed is that the connections that are having issues in the user logs have this message the below message AUT24803 2019-02-12 10:18:35 - ive - [213.205.192.30] Root::HayleySm(unknown)[] - Host Checker policy 'Community Host Check' passed on host '213.205.192.30' address 'a4-34-d9-e8-2c-18' for user 'HayleySm'. Whereas the message below is what a successful connection shows AUT24803 2019-02-12 10:18:31 - ive - [127.0.0.1] Root::LSS\nicolabos(Managed)[] - Host Checker policy 'Community Host Check' passed on host '176.254.190.171' address '90-61-ae-d5-e0-1c' for user 'LSS\nicolabos'. Thanks Jon

jonchill

Up until the begining of this week our Pulse VM and clients have been working perfectly but since Monday we've been getting odd reports from the users saying they are getting 1319 error messages when they try and login but if they try a number of times it will eventually allow access. In the user logs I'm seeing lots of these error messages for multiple different users AUT24327 2019-02-08 15:18:41 - ive - [92.9.206.238] Default Network::LSS\sharonrow(Managed)[] - Primary authentication failed for LSS\xxxxxxxxx/LSS-AD from 92.9.206.238 And I'm also seeing in the Admin logs lots of these errors. ADM22862 2019-02-08 15:44:58 - ive - [127.0.0.1] Default Network::System()[] - User Accounts modified. Removed username LSS\xxxxx from authentication server LSS-AD. My first instict is that its a backend AD issue but just wanted to run it past the experts to make sure that it is actually an AD auth issue rather than a Pulse issue. Any help or advice would be much appreciated. Thanks Jon

jonchill · ‎11-19-2018

We've started to get grumbles from users that are having problem with Web apps on the LAN when connecting via Pulse, in some instances objects on the page won't load at all and in others the user is continually asked to provide their AD credentials for each and every object on a page. The same users can open files and access their Exchnage accounts etc over Pulse without any issues it just seems to be certain Web apps that are having an issues. When the same user opens up the apps when they're directly connected to the LAN the app opens fine without any prompting or dissappearing objects which leads me to suspect its an AD authentication issue while connected over Pulse. Any help would be much appreciated. Thanks Jon

jonchill · ‎06-20-2017

kapilaks1, would you be willing to share the custom pollers for Solarwinds as I've tried doing a MIB walk and have been unable pull the information I need together? Thanks Jon

jonchill · ‎04-10-2017

How do I backup a VM appliance config? As far as I can see from the admin guide it doesn't mention config backups at all. Any help would be much appreciated. Thanks Jon

jonchill · ‎04-07-2017

We're just about to launch a managed VPN service for 3 organisations and they've asked us if they can have quarterly reports of what the user count was on a daily basis, what users have accessed VPN and what licenses have been used. I've had a look through the reporting offering and its very basic and only allows up to 30 day reports and those reports can't be customised. I've also had a trial of the Pulse One cloud offering thinking this would have better centralised user reporting but that doesn't have any user reporting at all. Is there anyway of getting the information they've asked for? Thanks Jon

jonchill · ‎11-21-2016

On AD we've got two groups setup for access to Pulse, a user group and a device group. What we want to be able to do is in the user role mapping if the user credentials and the device being used exist in the groups then the user gets assigned a role, if they don't exist in either of or both the groups then it fails. I've tested with just authenticating against the AD user group and it works fine but as soon as I try and introduce the device group it fails. We're trying to manage not only what users have access to Pulse but also what devices. Any help would be much appreciated. Thanks Jon

jonchill · ‎11-07-2016

I've tried deploying Connect secure VM's (SPE) to our DMZ ESXi host but it fails with a script issue. I've managed to successfully deploy the DTE VM. I've spoken to our support provider and they have informed us that the VM needs to be deployed to Vcentre and then exported and imported into the DMZ host. Is there no way of deploying the VM direct to the DMZ host? Any help would be much appreciated. Thanks Jon

Re: Strange Login Issue

Re: Strange Login Issue

Strange Login Issue

Issue with Opening some Web Application Objects wh...

Re: User Management

Connect Secure Virtual Appliance Config Backup

User Management

AD Device Authentication - Pulse Connect Secure v8...

Pulse VM Deployment without VCentre