- Pulse Secure Community
- :
- About Filbert
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
07-14-2015
3 weeks ago
Filbert
Contributor
40
Posts
9
Kudos
0
Solutions
04-03-2018
10:39:AM
It only occurs when DNS is set to "Use Device Only" as that's the only setting that actually alters the DNS of the wireless interface. We changed ours to "Use Device first" and users no longer have the issue but that may not work for eveyone.
... View more
03-30-2018
09:02:AM
Did anyone come up wih a solution for this? We are now seeing the same issue.
... View more
11-30-2017
07:38:AM
1 Kudo
The message/behavior is a result of your "Roaming Session" settings in the user Role. User Roles >"role name" >General Settings > Session Options. You have roaming sessions disabled which disconnects a users vpn session if their source ip changes. Typically this occurs when a user is connected from behind a load balancing firewall or other device.
... View more
04-03-2017
05:55:PM
There is a RPC called get-certificate-info which provides certificate validity. Check the DMI guide for details. Also, the administrator GUI in version 8.2 provides alerts on upcoming certificate expirations.
... View more
11-10-2016
08:31:PM
First open the Role that is being used, then go to the Web Tab for that Role. You should see a link under that for Bookmarks and Options. Go to Options, then go to View Advanced Options. Or see page 508 in the 8.1 Admin guide. Hope this helps.
... View more
11-09-2016
05:07:PM
Have you enabled file share rewriting? Role > > Web Options > View Advanced options Rewrite file:// URLs file:// URLs get rewritten so files can be downloaded using Windows file browsing.
... View more
08-30-2016
04:32:PM
1 Kudo
Verify you have this update installed and uninstall/reinstall WSAM. https://support.microsoft.com/en-us/kb/3033929
... View more
08-30-2016
04:18:PM
Go into System>Clustering> Clustering Properties. Set the cluster to Active/passive and enter the internal and external VIPs. The VIPs needs to be in the same network segments as the internal and external interfaces.
... View more
06-23-2016
03:47:PM
1 Kudo
What do the server side logs show for the connection?
... View more
06-15-2016
04:48:PM
If the Corporate PCs are domain members we typically check for the domain membership using registry key values or check for the device certificate if you are provisioning those to domain members. You do that using HostChecker then assign the correct Role based on the Hostchecker result.
... View more
06-13-2016
04:53:PM
You would need to create two separate Roles. One with Tunneling enabled and one without.Then map the user to the Role using a Custom expression based on the Agent string like userAgent = '*Chrome*' Put this one first in the role mapping rules making sure to check the "Stop Processing rules when this rule matches" checkbox. Of course if you are already using groups to do role mapping your custom expression will need to include those requirements as well.
... View more
05-19-2016
09:24:PM
1 Kudo
So authentication is failing because with LDAP it will use samaccountname value by default and domain/username won't match that value. You can change your USER attribute in the LDAP configuration to use userPrincipalName and logon to your PC with username@domain. It sounds like you have AD auth working now but have come to another issue. Does it map the user to a role and assign an ip address, etc..?
... View more
05-18-2016
03:08:PM
What authentication type did you configure for AD authentication on the PSA, LDAP or AD?
... View more
05-09-2016
09:00:PM
We ran into a similar issue. I think we figured out it was the setup client and no real workaround was found. You could try using the Pulse client instead. It's not server version dependent.
... View more
05-09-2016
08:54:PM
1 Kudo
You could try doing an XML export/import of the more complicated policy pieces.
... View more
04-22-2016
07:50:PM
The administrator of the VPN server you are connecting to with your Pulse client.
... View more
04-22-2016
07:39:PM
As the message indicates, you need to talk to the system administrator. The restriction is set on the server side.
... View more
03-23-2016
04:22:PM
1 Kudo
Yes, you can use the same pool in multiple profiles. It won't assign the same ip to multiple users.
... View more
02-01-2016
09:43:PM
this setting is in maintenance > System > Options Does anyone know if this setting only affects the Pulse client or also affects the web installation and upgrades of Network Connect, Host Checker, jsam, etc... The docs are not clear. Thanks
... View more
12-21-2015
07:03:PM
Which component in the MAG 6610 are you trying to SSH to? The MAG6610 is just a chassis.
... View more
12-17-2015
11:13:PM
1 Kudo
There are a few ways to do it. First, you could create a separate Role and Connection Profile for each user. Not great if you have more than a few users. Secondly, if you are doing Radius auth, you can pull the static ip (FRAMED-IP-ADDRESS attribute)from the users radius policy. And lastly, you can input a static ip in each users Active Directory record then use that variable in the Connection Profile. If you are using DHCP instead of statically configuring ip pools you may be able to do something with that but I've never looked into it.
... View more
12-11-2015
06:34:PM
With Network Connect users had the option of using the GINA logon or not when they started up their machine each time. We want to provide that same option when using Pulse and the Credential Provider but from what I've seen once you configure credential provider on Pulse it brands every login tile so the user has no choice but to not have Pulse try to start when they login no matter which account they use including the local account on the PC. Does anyone know of a way around this? Thanks
... View more
11-16-2015
05:20:PM
Not sure then. We have several customers who auto provision domain machine certificates using Microsoft certificate services. Connection behavior for Pulse is the user manually starts the client as needed and the machine certificate authentication works fine with that machine store option chosen. Most are using the latest version of Pulse and 8.1 on the appliance.
... View more
11-16-2015
03:44:PM
1 Kudo
Pulse can check for machine certificates. You need to go into the Pulse Connection configuration and check the box "Select client certificate from machine certificate store". It's at the very bottom of the settings page under where you choose how you want Pulse to start.
... View more
11-05-2015
04:50:PM
Set Java Applet plugin to "run in unsafe mode" instead of "always allow".
... View more
11-05-2015
04:20:PM
I think that KB is a little outdated. Just copy or email your .pfx to your device and install it. Add a connection to Pulse, choose certificate auth, and choose the newly installed certificate from your cert store. We use Android 4, 5, and 6 with this method without issue.
... View more
10-29-2015
05:18:PM
Thanks. I found out that the users are not actually using IE 11, but using IE9. Their proxy settings are getting set to http://127.0.0.1:port/proxy.pac. Is this the right behavior when using IE 9 and Pulse 5.1R5? I see this (PRS-327308) in the release notes that indicates that's an actual bug that was fixed. Can you provide the details of this PRS?
... View more
10-28-2015
04:13:PM
You probably could just add the new SA6500 to the cluster without a license and you'll end up with a cluster that is licensed for 1002 users but the new one will probably always complain that it doesn't have a license installed. Down the road, if the current SA6500 with the 1000 user license fails, the cluster will go to 2 users after 10 days. Which means you have 10 days to get it RMA'd and back online. I don't believe it's possible to split a current license. Typically Pulse won't alter an existing license.
... View more
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
