- Pulse Secure Community
- :
- About Kita_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
Kita_
Valued Contributor
607
Posts
0
Kudos
36
Solutions
03-09-2015
12:18:PM
Do you have a open case yet? I would like to look at the debug logs from the client machine. If you can connect via the browser, then there may be another reason why NC is not connecting. NC client is leveraging the IE browser to make the initial connection to the SA. I would assume this connection is fine if you can connect via the browser. Even if ESP failed, you should still be able to connect via SSL.
... View more
03-09-2015
11:57:AM
If ESP failed, it will fall over to SSL mode. This means it would follow the cipher suites the browser supports. I made the changes to my machine GP and pushed the update. I am not seeing any issues connecting via NC. Are you able to connect to the SA via web browser?
... View more
03-09-2015
11:37:AM
I tried to test this in our lab and I did not have any issues connecting with NC 8.0. I checked the cipher suites supported and it showed the following from the SA perspective. TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA Is it possible you have a load balancer in front of the SA device which is terminating the ssl connection?
... View more
03-05-2015
11:06:PM
If the device is hanging please take a system snapshot and open a case with support for further review.
... View more
03-05-2015
11:05:PM
Is the monitor for physical memory? The recommendation is to not monitor physical memory. If you want a better indicator if the device is under stress is to monitor swap memory.
... View more
03-04-2015
03:43:PM
Here is our official statement: http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB29833&actp=search&viewlocale=en_US&searchid=1425512636193
... View more
03-04-2015
09:09:AM
Understood, Ken. Currently, there is no plans to support RDP sessions directly via the Pulse client. If you would like, I would suggest you forward your request to the sales/marketing team so they can file an enhancement request. https://www.pulsesecure.net/contact-us/
... View more
03-04-2015
09:07:AM
Yes, the recommendation is to upgrade the passive device once. Once the upgrade is complete, it will attempt to upgrade the active device. During this time, it will failover the vip to the other device. This will cause a temporary disruption as end user sessions will be migrated to the other device.
... View more
03-03-2015
08:29:AM
Do we have a ticket open for this one? NC/Pulse MTU size on the VA should be 100 less the total size of the MTU on the physical interface. This is due to the encryption and decryption of the packet. If you are seeing 1400 size out of the internal interface of the SA, then I would check to see what the MTU size on the client's VA is. There may be another VA on the device which is decreasing the overall MTU size on the NC/Pulse VA. You should be able to tell the MTU size from the debuglog as well.
... View more
03-03-2015
08:23:AM
I have not heard of any built-in RDP functionality within Pulse. Since Pulse client is a L3 client, you can use any RDP app you like once the tunnel is created.
... View more
03-02-2015
09:53:AM
It could be related to a change in the Java client or the Pulse Secure component. According to the logs, it is stating the SA is running 8.1. If this was recently upgraded, this would cause all clients to update the setup client and any other Pulse Secure components. Have you tried to manally run the setup client? The logs stated it is in your temp directory at C:\Users\alexveys\AppData\Local\Temp\tmp7843748710466042621JuniperExt.exe.
... View more
02-27-2015
10:34:PM
Either should take precedence. If one is true, then the user will have access to the feature.
... View more
02-26-2015
06:31:AM
Hello Christian, Was a support case open for this issue? We are interested in looking at the data.
... View more
02-23-2015
01:40:PM
We have reached out to Airwatch and working with them to resolve this issue. There is no specific ETA I can provide at this time. When I have further information, I will update this thread.
... View more
02-23-2015
09:21:AM
It looks like host checker is launching and sending results to the SA/MAG. It seems this is an issue with OPSWAT SDK not being able to detect the software. Is this issue happening on multiple devices? Please run the ESAP Diagnostic Tool on a working and non-working machine. The tool can be downloaded at: https://www.juniper.net/support/downloads/?p=esap#sw Please ensure to open a support ticket so we can properly track this issue. Also, please let me know the ticket number once it is created.
... View more
02-22-2015
10:47:PM
Hello Mahmoud, Here is a older document stating the differences between Pulse 4.0 and Network Connect. http://www.juniper.net/techpubs/en_US/junos-pulse4.0/topics/reference/a-c-c-nc-comparing.html
... View more
02-22-2015
08:33:PM
We have not been able to replicate this issue in our lab. Has anyone has been able to confirm if these steps resolved their issue?
... View more
02-18-2015
10:27:AM
Not at this point, we will need to confirm if it is getting past the setup client or not. My assumption is that we should be getting further and running into another issues.
... View more
02-18-2015
08:22:AM
Did they try installing the EXE manually? After installation, can you provide the debuglog.log again?
... View more
02-17-2015
10:10:AM
00239,09 2014/01/02 21:33:14.730 3 zhubin JuniperExt.exe JuniperSetupExt p1328 t1110 DSSetupClientInvokeWebParameters.cpp:214 - 'DSDownloadSetupClient()' downloadUrl :https://dbrasweb-de.egslb.db.com/dana-cached/sc/JuniperSetupClientInstaller.exe
... View more
02-17-2015
09:40:AM
The error message will appear if setup client fails. This component is needed to launch HC. If setup client is missing, then you will receive the HC error message. Can the end user see if they can reach the EXE directly?
... View more
02-17-2015
08:59:AM
Is this happening for all end users? This doesn't seem to be a HC issue as I do not see setup client is able to be downloaded to the client machine. Can you check to see if SEP is blocking the setup client? 00148,09 2014/04/27 19:55:58.872 1 zhubin JuniperExt.exe JuniperSetupExt p1356 t7B8 dsHttpImpl.cpp:122 - 'DSHttpImpl::sendRequest()' httpSendRequest failed 00145,09 2014/04/27 19:55:58.872 1 zhubin JuniperExt.exe JuniperSetupExt p1356 t7B8 dsHttpImpl.cpp:341 - 'DSHttpImpl::downloadFile()' sendRequest failed 00197,09 2014/04/27 19:55:58.872 1 zhubin JuniperExt.exe JuniperSetupExt p1356 t7B8 DSSetupClientInvokeWebParameters.cpp:235 - 'DSDownloadSetupClient()' http->downloadFile(de-esb1.dbrasweb.db.com) error 1 00170,09 2014/04/27 19:55:58.873 1 zhubin JuniperExt.exe JuniperSetupExt p1356 t7B8 JuniperSetupExt.cpp:237 - 'DSSetupClientHelperExt::download()' DSDownloadSetupClient() failed 00156,09 2014/04/27 19:55:58.873 1 zhubin JuniperExt.exe JuniperSetupExt p1356 t7B8 JuniperSetupExt.cpp:287 - 'WinMain()' checkInstallation() failed, exit with -1.
... View more
02-10-2015
12:56:PM
Is there a case open for this? It should check both software if both are part of the policy.
... View more
02-10-2015
12:48:PM
This should be resolved in the next releases 8.0R9 which is out within the next 1 to 2 weeks. (PRS-322152)
... View more
02-10-2015
11:44:AM
I am seeing the same issue. I will file a ticket to get this resolved. Please open ticket so this can be properly tracked.
... View more
02-10-2015
08:22:AM
The recommended release is 8.0R8.1. You can refer to the admin guide for upgrade steps. https://www.juniper.net/support/downloads/?p=sa2500
... View more
02-06-2015
09:12:AM
Is there a case open for this issue? it would help to be able to review the debug.log on the client machine.
... View more
02-05-2015
12:41:PM
It would be a browser restriction and does not require host checker. We have the function to check for specific OS version and provide remediation steps, but there is no feature to block all device from a specific OS (i.e. block all iOS devices).
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
