About Ray

Ray

Hi Team, Any progress for adding Delete comment option under Show option menu? Having Edit option is really good, but not able to delete the entire reply. To do that, I have to empty out my comments and post it, which is leaving a last post entry on the topic. Thanks, Ray.

Ray

zanyterp

Can those experiencing this confirm what type of machine they are using (tablet vs desktop/laptop)? are these intel processors, AMD, or ARM? is this using the legacy WSAM client (blue icon in the system tray) or the new client (built-in to the Pulse client)? the logs that have been posted look similar to an old XP issue; however, we have not seen or heard anything like what his showing up here from users coming in to our queue or seen in our in-house testing.

zanyterp

Thank you for the update and opening a ticket with support. if you are using both certificate & AD, that looks like the AD component is failing

zanyterp

I can confirm that it cannot be removed; it is part of the Pulse client installation.

zanyterp · Re: Pulse Secure 5.3.1021 not showing any connecti...

are they using the same connection set/store as other systems? does the connstore.dat show the option to allow users to add connections?

zanyterp

Do other AV softwares work successfully? It appears you have identified an issue with Host Checker; as @Ray indicated, please open a case with the support team for tracking the failure with OPSWAT

zanyterp

lockdown & always on VPN configuration if you need further clarification, please open a case with support

zanyterp

that is not something we have seen; however, having another VPN up and running, especially a utun, would not surprise me to trigger this i will try to get an openVPN server up and running to test this specific scenario as well

zanyterp

Have you defined only the specific EKU that you want used? I believe that sounds fine; however, without seeing the log I cannot confirm As mentioned by @Ray, please open a case for confirmation

zanyterp

What is the router fronting the system? Does the router show the packets going through to the PCS? Does the PCS show the packets being received? Do other clients connect successfully?

Ray

Yes.. It was documented in this KB, KB44000 - After installing Pulse Desktop Client 9.0RX (macOS) and above, network speed begin to decrease slowly over time when not connected to a VPN tunnel.

Ray

Hello Tony, I believe it's a typo coz. there is no such thing called authentication code (typo in KB), it's Authorization code. Serial number + hardware ID + Authorization code = license keys. Since installing license keys on VMs are not allowed, we have to use the Authorization code to download and install licenses instead of manually applying them. Downloading the licenses from the Pulse Cloud Licensing Server (PCLS) will not require any serial number to generate and install licenses on VMs. Hope this helps. -Ray.

madhupk16

Hi Ray, Thanks for your help, I requested my admin to endale JSAM and waiting. I will update after my admin response Thanks

zanyterp

Thank you for the further information, @tony.f yes, if your PCS is in the AWS cloud, i do not believe split tunneling disabled can be used (i know that is a limitation of azure and am guessing it is the same for AWS). i have not heard/seen where it disconnects the adapter in either scenario, though. i would recommend opening a case with support for further investigation @Ray, thank you for the detailed write up

zanyterp

Do you have the Pulse application in your system tray that you can use to launch from instead of relying on Edge? Is the SAP logon through Edge or another browser/application? If it is through Edge, WSAM cannot tunnel the traffic and an L3 tunnel will be needed

spuluka

The coverage is most vendors but does need to be kept up to date on the server side. If you are the administrator update and activate the latest ESAP file. Or request that the admins for the Pulse appliance do so.

Ray

As per the KB43717, if the mentioned conditions are met with yours, you can try to implement the "Workaround" part. Workaround: If all conditions apply, Pulse Secure recommends to take the following actions: Uninstall the Pulse client Apply the workaround provided in Microsoft support article 4098563. The workaround will completely block the reliability tool from running. To do this, run the following commands: takeown /f "C:\Program Files\rempl" /r /d y icacls "C:\Program Files\rempl" /grant administrators:F /t /q icacls "C:\Program Files\rempl" /deny system:F /t /q Reinstall the Pulse client

Ray

Trying using Pulse Client to connect to the VPN server. Once you got successfully connected, the Pulse Client will act as Pulse SAM (PSAM) and behaves just like WSAM. To check, open the pulse client >> right click on the VPN connection >> advanced connection details >> check if shows the transport type as WSAM.

zanyterp

That sounds like something that could be beneficial for multiple users. I would recommend reaching out to your account team to let them know that this is a feature that would benefit you so they can let the product management team be aware of the need

zanyterp

Pre-server 2016, in order to use a Windows server as your DHCP server, the PCS and server need to be in the same subnet so that the server can respond to the DHCP request with an IP. I do not have access to a system running Server 2016 to confirm, but the MS doc indicates it maybe should work now.

zanyterp

Can you confirm that you are using split tunneling disabled?

zanyterp

Are you referring to non-TOTP as "normal login" or "existing TOTP user logging in after successful registration"? Are your users logging in against the internal port or external port?

zanyterp

Can you confirm that the computer you are connecting to is listed in the ACL as allowed? If the computer is not allowed, that is the message that will be displayed.

zanyterp

Unfortunately, no, it does not match something we have seen yet. As requested, please open a case with support so that we can work with you more efficiently. Did 5.3Rx resolve the issue?

csuchindra

The second issue has been raised. The team is working on it. Will update with the dates once it is finalized

Ray

Hi @izzinwa, You're welcome. :) Please close this thread as solved. Thanks, Ray.

Ray · ‎01-17-2019

1. While signing up with pulse one cloud, you will be asked to enter your cloud instance hostname. If you enter pulsecloud as the instance name, then the url will be pulsecloud.pulseone.net. Use /admin at the end to get to the admin's web UI. 2. Normally, you will be using your business email (which you used during the sign-up process) and I believe after activating the instance by verifying your email address, you'll be asked to setup a password to login.

Ray · ‎01-17-2019

Review this KB article: KB43833 - Slow download speeds over Wifi after installing Pulse Desktop client on Windows 10 Redstone 3 and up https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB43833.

Ray · ‎01-07-2019

You're welcome :)

Deleting comments / replies.

Re: How do I disable the persistent upgrade prompt...

Re: Connects but doesn't always work

Re: Strange Login Issue

Re: Remove Cloud App Visibility agent (cav.exe)

Re: Pulse Secure 5.3.1021 not showing any connecti...

Re: MacOS - version 9.0.2 does not work, 5.3.1 doe...

Re: Vpn intranet or internet

Re: macOS 10.14 crash with 9.0.2 or 9.0.3 client

Re: v5.3 shows all certificates (not only appropri...

Re: IKEv2 on iOS 12

Re: Pulse Secure v9.0.3 B1599 and macOS Mojave net...

Re: Where do I find Pulse Connect Secure serial nu...

Re: Your OS/platform is not supported for this com...

Re: "VPN Tunneling" disabled forces wifi to discon...

Re: Connect to SAP system on Parallels 14 / Win 10

Re: Your computer's security is unsatisfactory err...

Re: Error 1205 Failed to setup Virtual Adapter

Re: Windows Secure Application Manager Disconnecte...

Re: PulseSecure Won't Install - Windows for ARM / ...

Re: Pulse Secure with Windows 2012 DHCP Server

Re: Error while opening microsoft stroe over VPN w...

Re: TOTP failure

Re: Unable to remotely login to computer at work -...

Re: macintosh crashes with pulse secure

Re: Pulse Secure and Ubuntu 18.10

Re: how to add mutliple VPN search domains

Re: Hi

Re: Internet speed drops below 1 Mbps when connect...

Re: What does "use desktop credentials" exactly do...