Hi Gurus, I want some users to connect transparently to our Gateway using a certificate signed by our private PKI. The problem, I'm facing is with the Role Mapping restriction where I want to use Group Membership. The Certificate Auth Server Looks for which value is: [email protected] I can alos use which value would then be: Valiere Jean-Christophe On the LDAP/AD Authentication server, I look for user entries using the following filter: samAccountName=, which value is: valiere.j-c I could also use cn=, which value would then be: Valiere Jean-Christophe The Group Membership filter is: cn= and Member Attribute is member. Finally. the Subject of my Certificate is as below: E = [email protected] CN = Valiere Jean-Christophe OU = SIT OU = Administrator Accounts OU = ORG DC = DOMAIN DC = tld And the Subject Alternative Name is as below: Principal Name = [email protected] RFC822 Name = [email protected] The issue is that I can't have a match between user and group membership because the CN of the certificate is "Valiere Jean-Christophe" and my samAccountName value is: valiere.j-c My guess is that I would have to change the certificate Subject, unfortunatelly, I'm pretty limited with the options of the certificate Subject & Subject Alternative Name. Is there any way I can request the CN of user from the samAccountName to then find if the user belong to the group ? Hope I have been clear :-) Thanks & Best Regards, Jean-Christophe Valiere ... View more

Hi Guys, I have a cluster a of MAG-4610 in active/active mode behind a cluster of Load Balancer (A-10 Networks). I'm running version: 8.0R10 Acessing the Cluster of Pulse Secure through HTTPS directly or connecting using the Network Connect Client works perfectly. But trying to connect using Pulse Secure Windows Client doesn't. It used to work when the Cluster of Pulse Secure was connected directy to the firewall. Now that it is connected through our Load Balancer it doesn't work anymore. We use 2 Form Factor Authentication on the Pusle Gateway (Firts against LDAP and Second agains Radius/OTP). I noticed that accessing the Pulse Secure Gateway directly or using Network Connect provide me a "Web Page" asking for: Username / Static Password / One Time Password, while using Windows Pulse Secure Client, first ask me for my Username / Static Password and then prompt me for the One Time Password, On the load balancer, I just load balanced HTTPS protocol with source IP persistance. Does anyone have ideas why the Windows Pulse Secure Client doesn't connect any more ? It doesn't even prompt me for the Username / Static Password. Also notice that, I used wireshark on the Windows Client, and I can see the certificate being delivered to the Windows Client, and then nothing more. Are there any port to open on the firewall ? Thanks and Best Regards, Jean-Christophe ... View more