- Pulse Secure Community
- :
- About nurklik_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
nurklik_
Occasional Contributor
12
Posts
0
Kudos
0
Solutions
07-02-2014
03:45:AM
Yeah, I saw that post. But as I mentioned most of the time it's ok - authentication goes through ok. No configuration change on the IC cluster. And I also checked - the radius client is a member of group that is again tied to a sign-in policy that again is associated only with one realm. BR, Kalev
... View more
07-01-2014
03:07:AM
Hi, been getting these messages lately in the logs. For the same configuration/client/setup/etc most of the time it's ok. For example for one client in a day it makes 10 auth's and only one of them ends with a log message like in the subject. One more thing that is common is that these radius auth's come from branch office devices so I was thinking there's something to do with maybe transport delay's or similar. It's kind of difficult to troubleshoot because it happens when it happens and leave on massive logging for days is not a first step. Does anyone have any experience with similar log entries. BR, Kalev
... View more
06-28-2012
06:11:AM
Hi, the cisco webauth feature with ISE is layer 3 authentication. My question is has anybody been able to make this work with IC? Cisco switch confgured to use webauth but the central auth is through IC not ISE. BR, Kalev
... View more
06-26-2012
12:35:AM
Hi, http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml If You read through the introduction then it should be understandable what goes on. My question is can this be achieved with IC? And if yes then can anyone give some pointers? As what radius attributes are involved and such. Any help greatly appreciated. BR, Kalev
... View more
06-25-2012
01:16:AM
Hi. Is it possible to use with some kind of redirection or something similar the IC web based authentication instead of local cisco default webauth web pages in the switch. I think I found an example how to use cisco's own policy engine server web auth for that but can it be done with IC? BR, Kalev
... View more
04-09-2012
06:52:AM
Hi, I did the rollback and things started to work. Concerning opening the case - have to think about it because solving the case takes time and these systems are in production. End users can't wait that long. And I do not have any test systems... Any recommendation? :) BR, Kalev
... View more
04-05-2012
07:12:AM
I'm going to do the rollback soon to test if the software version is to blame but thought that maybe I should ask here also. Situation is this - * Using SSL with Mozilla/IE connecting SA2500 SSL VPN * Problem is with two different EMC eRoom links (different servers/links/etc) Both eRooms work so far that they get the /eRoomASP/CookieTest but do not go further (I see it in IVE logs) On the client in the browser only the blank page is presented. These HTTPS links through SA where working before and they are the same as before. No configuration with this profile/resource hasn't been changed. All other links seem to work ok. The same client (PC/browser) works ok over Pulse connection - using same HTTPS link as with SSL VPN. Any pointers what might be the problem or where to look? BR, Kalev
... View more
04-05-2012
06:48:AM
Hi again, the constore.dat was the culprit - after letting client systems regenerate the local guid it seem that this problem went away. Thanks for the tip! BR, Kalev
... View more
03-29-2012
11:47:PM
This could be the case. I'll try this out and see if it helps. Most probably it does. To add to the procedure for changing the guid for local machine I found out that You also have to restart the Juniper Unified Network service otherwise the new guid would not be created after deleting them from the previously metioned files. BR, Kalev
... View more
03-28-2012
01:37:AM
I have a problem where Pulse users compete for access on SA2500 cluster. Let me explain - it seem that there are some users (maybe because they more frequent and thus stumble on this problem more often) that when they go online then they make some other user to logout. Which in turn of course makes that logged out user to login again which makes the previously logged in user to log out and to login again, etc. Until one or both of the users give up. There's nothing else in logs that indicates a problem other than this competing with session started/ended events. No events indicating there's a problem - user experience and log time stamps prove this happens. Also there seem to be users that are not affected. I have tested this and also according to log there can be multiple users simultaneously connected. What makes this more strange is that there's no user specific role mapping on SA2500 - users get their roles based on group memberships and as far I can say there's users that get the same role but one of them has a competing problem and the other doesn't. Also the realm is the same. Can there be a licensing problem with cluster? At the moment there's the old model in use - users on one SA and the same amount shared to other SA. IVE version is 7.1r5. Any info or help is appreciated. BR, Kalev
... View more
05-23-2011
05:16:AM
Hi, Using 7.1R9 on SA2500. I see session ID in login and logout messages for browser based SSL VPN sessions. But for Pulse client VPN connection I see the session ID only with logout message. Why is that? BR, Kalev
... View more
05-23-2011
01:26:AM
Hello. Is this situation possible as stated in subject? In other words does the infranet controller push to the same IE policies with same source address but different usernames. As I read from one KB article then IC can omit the IP when IC detects NAT'd source while authenticating and thus not sending the source IP to IE. And if the situation is possible (same source IP/diff. user in IE auth table) then how does the enforcer match the policy for different users? Can the enforcer differentiate between them? BR, Kalev
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
