Gordon, This problem would be difficult to diagnose without looking at diagnostic log bundles. Is there a way you could work with the system administrator who manages your Pulse Connect Secure gateway to create a ticket with Pulse Secure and send a log-file bundle to us? -JB ... View more

Generally, one would get hashes by having your system administrator go into my.pulsesecure.net and see the hash there. But to get you over the hump, here are the hashes: 5.0r3.0 mac osx installer - 2a9b538d860f91b40a2c8b53417c8955 5.0r3.0 package - aedbbcc5249adf65fe596a1994b974d4 5.0r3 windows 32-bit installer - e8be3b09828f5479060a60b7458d007c 5.0r3.0 windows 64-bit installer - ca9d76af700f6ef917976d600c6782a8 ... View more

The Pulse Secure desktop client does not support the establishment of a VPN connection through a SOCKS proxy. If this is important to your organization, I encourage your organization to reach out to Pulse Secure's Global Support Center (http://www.pulsesecure.net/support) to register your interest in this functionality. ... View more

dn123, "agentd error" is a message sent from the server, and generally means that something unexpected happened on the server side (on the Pulse Connect Secure gateway you are connecting to). Generally in these cases, the best course of action is to contact your system administrator and have him/her create a case with Pulse Secure's Global Support Center so that the proper diagnostic data from the server can be collected and analyzed. http://www.pulsesecure.net/support -JB ... View more

The Pulse Secure Universal App for Windows 10 does not currently contain any Host Checker functionality beyond the OS Check you mentioned. We are currently investigating a number of approaches that could be used to work around the "sandboxed" environment that the Universal App runs in. We hope to have announcements of improvements in this area in the future. ... View more

Frogglet, Without being able to look at your log files and without knowing more about your environment, it's difficult to guess what might be going on here. That said, Apple did make subtle changes in the keychain in OSX 10.11 (El Capitan) that caused certificate-based authentication to fail with Pulse. This issue was fixed in Pulse 5.1R5.1. So, you may want to upgrade to that version to be safe. But if, on the other hand, you are not using certificate auth, then you may want to create a case with Pulse Secure's Global Support Center so you can share your log files and other information so a proper diagnosis can be made. -JB ... View more

Hi Filbert. Generally, what you have written is correct: Once Pulse's credential provider is enabled, the end user is not given a choice of whether to log into the desktop with the Pulse credential provider tile or a non-Pulse tile. The Pulse tile is generally the only option. That said, the end user can always log in with the Pulse tile, then when the VPN connection is being established, the end user can hit the "Cancel" button to terminate the VPN connection attempt, but then continue to log into the desktop. If that's not an acceptable workaround, then I recommend that you reach out to the Pulse Secure Global Support Center or directly email [email protected] (and reference this forum post) for guidance. There may be other options, but they are complicated and would need to be discussed with support personnel. ... View more

You may need to reach out to your system administrator to determine how your "Host Checker" functionality is configured (and which AV systems are required). You can also check out the release notes for our "ESAP" product to get a sense of what AV systems can be detected: https://www.pulsesecure.net/download/techpubs/current/563 ... View more

Max, Are you upgrading the client by connecting your old client to a new Pulse Secure gateway? Or are you double-clicking on a local MSI file to initiate the upgrade? If the latter, could you send us a log bundle? To do so, run this command: msiexec /i /l*v PathToLogFile That will initiate the upgrade and create a log file. Once you have the log file, could you zip it and send it to: [email protected] ? We'll take a look when we get it. Thanks! ... View more

Our Knowledge Base (KB) article on Windows 10 support is here: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/kb29856 Generally, you need the 5.1r4 Pulse Secure desktop client for Windows 10 support. Can you work with your sysadmin to get up to this version? Alternatively, have you tried using the Pulse Secure "Universal App" for Windows 10? The Universal App is a very lightweight VPN app that can be downloaded from the Microsoft store and that works with Pulse Secure's VPN gateways (Pulse Connect Secure). The Universal App is here: http://microsoft.com/store/productid/9NBLGGH3B0BP documentation is here: https://www.pulsesecure.net/techpubs/pulse-client/pulse-secure-client-mobile/5.2rx The Universal App has more limited functionality than the larger Pulse desktop app, but if it works in your situation it might be a good choice. Note: The universal app is free. ... View more

Brook, This is a known issue with Opswat (the third-party infrastructure we use to determine endpoint posture/configuration). Pulse Secure created a ticket with Opswat for fixing this (It has to be fixed from Opswat side and will go in the ESAP package once Opswat team releases fix for it). In short, the issue is happening because the Opswat SDK was not able to query the Scan status of Sophos AV on Mac. If you contact a Pulse Secure Global Support Center representative about this, you may want to reference tickets: PRS-334091 PRS-334607 Apologies for the inconvenience. -JB ... View more

There are a number of options available to reduce the amount of control the end user has over the Pulse client's behavior. I recommend going to our Tech Pubs site: https://www.pulsesecure.net/techpubs/pulse-client/pulse-secure-client-desktop/5.1rx and taking a look at the Pulse Client Desktop Administration Guide: https://www.pulsesecure.net/download/techpubs/current/157 There are a number of options to consider, for example: "Allow User Connections" - You might consider unchecking this box "Allow user to override connection policy" - You could uncheck this box as well There are other things you can do to ensure that tunnels are up when you want them without user interaction. For example, you could consider creating Location Awareness rules to ensure a tunnel is established when you want it. Also, you could configure certificate authentication so that tunnel creation cannot be defeated by a user intentionally failing to enter credentials. You could also configure pulse to auto-restart a connection upon termination. If you have questions about these options, you might want to contact our Global Support Center. ... View more

When working as designed, the Pulse Secure clients should revert from ESP to SSL only if the ESP (UDP) connection fails consistently. More specifically, there are timeout/heartbeat mechanisms that ensure that UDP packets are being transmitted properly; if this mechanism indicates a failure for more than 75 seconds, then the tunnel will revert from ESP to SSL. So, the first step would be to see whether there is anything in the networking substrate that might cause the blockage of UDP packets after an hour. Perhaps a network-node change, like a firewall or router? There have been cases in the past of customers incorrectly configuring load-balancing or other clusters of Pulse gateways, and this can cause packet loss. You may need to consult your system administrator to see whether these apply to you. If the network substrate can be ruled out as a cause, then you may want to contact Pulse Secure's Global Support Center for more information: http://www.pulsesecure.net/support If you do, you may want to reference ticket PRS-324375. ... View more

There is some discussion of this in the Pulse Clients Administration Guide, which is here: https://www.pulsesecure.net/download/techpubs/current/157 Search for "VPN on demand", and let us know how it goes. ... View more

Hi again. I spoke to some engineers about this, and no-one was aware of any issues relating to having to put IE 11 into Enterprise Mode in order for NC to work. I think to diagnose this further, we'd need to you (or your system administrator) contact Pulse Secure's Global Support Center to create a case so that we could collect the proper diagnostic data. ... View more

I recommend using the Pulse Secure Universal App for Windows 10. You can find it here: https://www.microsoft.com/en-us/store/apps/pulse-secure/9nblggh3b0bp If you have issues, you can either respond to this forum thread, or, you can email [email protected] Good luck! ... View more

Setup Client 7.2 is very, very old. Is there a way you can convince your system administrator to upgrade your Pulse Secure gateway to a newer version, perhaps 8.1? Pulse Connect Secure 7.2 is associated with Pulse 2.0 (I think that's right), which predates OSX 10.10 by some time. Did you ever have this working? I would be surprised if this could be made to work. ... View more

Several questions: * are you using the Pulse Secure "Universal App" for Windows 10, which is downloadable from the Microsoft app store, or, are you using the traditional Pulse Secure desktop client, which is downloaded from the Pulse Secure gateway to which you are connecting? * Are you trying to prevent the Pulse Secure UI from starting, or, are you trying to prevent Pulse from creating a VPN connection? Generally, there is no way to prevent the Pulse UI executable from starting when you log in. Your system administrator can click a checkbox to prevent the Pulse splash screen from displaying, but you can't tell the Pulse UI process not to be resident in the background. Now, if Pulse is automatically trying to create a connection when you log in, then this could be fixed by asking your system administrator at your school to change the default policies. Assuming that you don't know your sys admin or that the policies can't be changed, if you are using the traditional Pulse desktop application, you might be able to switch to the Universal App (go to the Microsoft store and search for VPN - you should see it). The Universal App is a bit more lightweight and might be more to your liking. Please note that the Universal App only works with certain Pulse Secure gateways and configurations, so it may not work in your school's environment - you'd have to try it. Good luck! ... View more

Hi there. This question was recently asked in another forum post: https://forums.pulsesecure.net/topic/pulse-desktop-clients/1000702-pulse-and-proxy-pac-with-ie11 Long story short, there was a fix in the Pulse desktop client 5.0r8 and the Pulse Connect Secure gateway 8.0r8 to address this issue. The ticket number is PRS-303538 ("Pulse will not use Server side proxy when resource accessed from IE11 after tunnel established due to changes in IE11 application, works if resource accessed from FF"). I recommend that you ask your system administrator to upgrade to at least PCS 8.0r8 (and, really, upgrade to the latest 8.0 version that is currently available). If you have questions about this, feel free to have your sys admin reach out to the Pulse Secure support team. If you have questions about this ... View more

Jpayne, We've had a couple of other reports of intermittent/occasional issues on El Capitan. We are currently investigating. Would you be willing to email a Pulse Log bundle to "[email protected]"? If so, I'll make sure the proper developers take a look. Alternatively, your IT administrator could reach out to our support organization at http://www.pulsesecure.net/support and create a formal tracking ticket. ... View more

Filbert, In short, yes, what you are seeing is expected. Originally, Pulse used a file-based proxy, but then we noticed that file-based proxy no longer worked with IE 11. As a result, we changed Pulse to use an http-based proxy with IE 11 only. Later (after that fix was released), we realized that there were cases in which earlier versions of IE (including 10 and 9) also did not work with file-based proxies, so we extended the http proxies for earlier versions of IE. So, I believe that what you are seeing is correct. Let me know if this doesn't make sense. ... View more

Yes, I believe this has been fixed. There were several tickets filed relating to this behavior, including: PRS-303538 - Pulse will not use Server side proxy when resource accessed from IE11 after tunnel established due to changes in IE11 application - works if resource accessed from FF PRS-310334 - Pulse 5.0R3 doesn't restore proxy settings during normal windows shutdown To get both of these fixes, you'd need to move to 5.1r4 or later. To get just the first fix, you'd need 5.0r8 or 5.1r1 (or later). But to be safe, I recommend upgrading to the latest version of the Pulse Secure desktop client 5.1 (should be 5.1r6 as of this writing). Let us know if you upgrade and still have issues. ... View more

Yeah, there's very little you can do on the client side, other than to "Suspend" your VPN connection temporarily when you need to print then "Resume" after you finish (there are menu functions on the system tray for suspending and resuming Pulse connections). Indeed, the lack of options here is intentional in some regard, to the extent that your system administrator wants to prevent data leakage. I think your best bet would be to figure out who your system administrator is and recommend that the admin make the change to allow Local Subnet Access. ... View more

If you are willing, could you email your JunosPulseInstall.log file to [email protected]? ... View more

You might want to work with your authorized customer support representative to get help on this issue: https://www.pulsesecure.net/support/ There are lots of questions here: * Were you installing a Pulse Secure client? If so, which one, and what version? * What Operating System was on the endpoint? * Where did you see the error message? * What method were you using to install the client (MSI/DMG file? Install from web browser? Other?) There are lots of variables here, so working with our support organization (or with your organization's system administrators) might be best. ... View more

Hi there. This is possible through a server-side configuration called "Tunnel routes with local subnet access". This was an option added in the 8.0 Pulse Connect Secure gateway (and 5.0 Pulse Secure desktop clients). If you go here: https://www.pulsesecure.net/download/techpubs/current/5 (8.0 Pulse Connect Secure Admin Guide) Then search for "local subnet access", you'll find the documentation. You'll need to modify the server-side configuration, then have the clients reconnect to the Pulse Secure gateway to pick up the new configuration, then local printing should be possible. Let us know how it goes! ... View more

Once you make the change in the admin console and save your changes accordingly, end users will automatically pick up the change the next time they connect. ... View more

For all Pulse Secure software, please go to the Pulse Secure Licensing and Download Center at: https://my.pulsesecure.net If you have questions about this, reach out to your support representative at: https://www.pulsesecure.net/support/ Also, please bear in mind that support for dynamic VPN connections to Juniper SRX firewalls will end in Pulse 5.2 and later desktop clients. Please contact your support representative for details on this. ... View more

Just so there's no confusion: The Pulse Secure desktop client 5.1r5.1 was released on Friday, October 2, and it contains a fix for an issue that prevented the client on OSX 10.11 from making a VPN connection when using certificate-based authentication. Please install that version to fix this issue. ... View more

Generally, there are two ways to get the Pulse Secure desktop client installed on an endpoint device: * web-deploy * pre-deploy With Web Deploy, you point your endpoint machine's web browser to your company's Pulse Connect Secure gateway, and click on the proper link to begin the download and install of the client. This is (I think) what you are trying to avoid. With Pre-Deploy, you receive a copy of the MSI/DMG installer file, and then install it, either manually, or, through a third-party software-distribution system like SMS. This sounds like what you want to do. Generally, the MSI/DMG files for the clients cannot be accessed by end users via the Internet. System Administrators can access the client installers through the Pulse Secure portal here: https://my.pulsesecure.net But, again, that site is not accessible to end users. The only other option is for Windows 10 users. We have a "universal" Pulse client in beta that works on all Windows 10 devices only. It is here: https://www.microsoft.com/en-us/store/apps/pulse-secure-vpn/9nblggh3b0bp This site is accessible by end users and is not restricted to customers with Pulse Secure portal accounts. ... View more