- Pulse Secure Community
- :
- About CaseyH_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
CaseyH_
Contributor
62
Posts
0
Kudos
0
Solutions
07-17-2015
03:06:PM
I found this old thread and we tried to change the metric in Windows 7, but it wouldn't stick. It kept reverting to being checked. https://forums.pulsesecure.net/topic/pulse-connect-secure/41163-mac-os-106-network-connect-wireless-quotrouting-table-changedquot-error/highlight/true#M7741
... View more
07-17-2015
03:04:PM
I have a client using Windows 7 that can't stay connected to Pulse. I found in the logs that 2-4 seconds after connecting, the route table is being changed and thus Pulse disconnects. I could use some assistance in finding WHAT is changing the routing table and causing the issue. I read through some of the older issues with Vista and XP to see if anything was of use. I saw references to Bonjour changing the table, but this machine does not have that installed. The error log entry (with me noting out specifics): The connection VPN (myvpn.com) (ID 53c7860f-66e1-41a8-910b-940f39885a95) was disconnected due to change in routing table. Interface address changed from 192.168.1.2 to 0x0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 is there a way to capture what's making a change?
... View more
06-26-2015
08:22:AM
Is this box being updated on the download software page? I'm specifically looking at the MAG2600 download. I'm still at 8.0.R4 and looking at upgrading to a more current release. by what I read in the box, I should stay with 8.0.Rx, but it appears like I should be getting to 8.1x sooner rather than later due to the branding change and Windows 10 support. (current info in recommended box: JTAC Recommended release for this product is: 8.0RX Note: X is the latest maintenance release available in that branch.) If indeed 8.1x is the recommended, then can I get some help in what changes my users will experience? I don't have a test envriorment to test and see the results in. thanks.
... View more
06-26-2015
08:12:AM
I've had that same issue with 2 users now. one I never got to actually troubleshoot (time resolved the issue... don't ask, I don't know either) I tried following up and they told me "it just started working" no changes were made on my side. The other is/was getting hung up at "Checking Compliance". I opened a case and worked with an engineer for 2.5 hours and we couldn't get it to work. It was an older machine that had previous issues with malware/viruses. The department head decided he would replace the machine. No resolution was ever found on either case. so.. 2 isolated incidents with odd enviornmental issues. Other than that... 99.5% of my users have no issue with Host Checker.
... View more
06-15-2015
08:16:AM
ah...thanks. Worked like a charm. I think when I tried it last week, I was looking for an adapter called Pulse. but if I remember right, I opened up Wireshark before connecting to Pulse and didn't see any other interfaces except my ethernet and wireless. anyway.... thanks for the help :) now to prove this thing!
... View more
06-12-2015
09:46:AM
Is there a way to decrypt the traffic or something like for troubleshooting reasons? when I capture from the client side, all I can see is the TLS packets, so it's proving difficult to troubleshoot the netflow. Long story short... I have a external client's network that is having access issues with a particular program. I've found there's a packet that's being sent from the server on our side, but it's not making it to the client. so I'm trying to find a way to follow the traffic and definitively tell our client that the packet is being blocked on their side. (i've got 50 other clients working as intended via our VPN, only this one does not) If there's a good troubleshooting doc for access related issues -- I'd take that too, but all I can seem to find are articles for NC.
... View more
06-10-2015
07:52:AM
I already have a case open, Kita. I PM'd you yesterday with the case number. I've received 3 different emails that "A Note has been logged to your SR...." but the only note I see is where I changed the follow up method preference. I'll call support in a bit to see what's going on.
... View more
06-09-2015
07:36:AM
MS AD authentication So here's the backstory on the issue: The client was working fine on her machine. The program that is used for their work was upgraded/changed. Since then, she can't get connected to our VPN service on her machine. However, she can use another machine in the office to connect just fine. So that led me to believe it was something on that machine specifically. I had one of our desktop techs go out to the site to look at it. He tried to log in as the user and it hangs at "Checking Compliance" and eventually gives the message that the authentication has been rejected. To make the situation a bit more wierd.... our tech that went onsite was able to log in with no issue. so I'm kind of at a loss. when looking through the Pulse client logs, I saw the "authentication rejected by server" error 303 and was hoping that would provide some light on the issue.
... View more
06-08-2015
10:53:AM
I've got a user that used to be able to log in just fine to our VPN service. "suddenly" it stopped. Not sure what changed on their end. This is an external customer, so we don't manage their equipment. I got the logs and I can see the message in the subject line repeated throughout. "Authentication rejected by server. Error 303" I can't seem to locate any more info on what exactly that message means. Is there a list or something somewhere where you can look up specific error codes? (or can someone clarify the specifics of that error message) thanks.
... View more
06-01-2015
01:37:PM
Kita, am I correct that when the Pulse connection is terminated a "release" command is sent to the DHCP server?
... View more
06-01-2015
12:27:PM
In troubleshooting another issue, I found our internal DHCP (MS AD) is reusing addresses pretty rapidly. What I've been trying to find is how the VPN software handles the DHCP process (requests / assigning / releasing). it appears that when a Pulse client disconnects it's sending a release command to the DHCP server? My goal would be to have a delay of some sort on the IPs being assigned so that I'm able to track back using IPs. I know that sounds confusing.... So when we're using Wireshark to correlate the traffic, we're running into problems of the IP being handed out so quickly (within 1 minute) that the traffic gets sloppy and hard to parse through (because then we have to find the time the IP was reassigned and use a timestamp). So any help on how the VPN software handles the DHCP requests from begining to end? (when using Pulse clients)
... View more
05-27-2015
07:37:AM
@elevated-pulse wrote: Wish Juniper had their own VoDs for this device explaining in detail how rewriting and the thin-clients work independently and in synergy for complex scenarios. Hopefully Pulse Secure will introduce something like this. I agree it would have a huge value add.
... View more
03-24-2015
10:40:AM
In troubleshooting a client not being able to connect, I was trying to narrow down (filter) by date. I can't seem to use a date in 2015 for my filter. 2014 is the highest available in the dropdown. We are currently using: Model: MAG-2600 (Active/Passive cluster) Current version: 8.0R4.1 (build 31475) Is there a trick?
... View more
02-05-2015
10:20:AM
In order to use "looks" for *JunosPulseAndroid* won't I need to make a custom HC check? Kita, is this something that can be suggested for future versions? I.e. being able to deny by OS?
... View more
02-05-2015
06:47:AM
I guess i'll use that as a temp solution until I can figure out how to configure using the browser names and such. Is there a doc on how to use custom checks?
... View more
02-02-2015
02:37:PM
Is there a way to get some sort of data on what versions of iOS are being used by current iOS users? Management's decided they might want to block certain versions of iOS from using the VPN, but they want to know what versions are being used currently. I know.. it sounds backwards, but I think it's just so some communication can be sent out before we cut off any clients using an older iOS version.
... View more
02-02-2015
12:01:PM
Will this also block Android users that have downloaded and installed Pulse?
... View more
02-02-2015
11:26:AM
I've been tasked with blocking all Android devices from connecting to our VPN. I don't see a way to block using the HC OS Checks. Appears to only let me choose which to allow (and I get messages when I leave the OS window unpopulated). - thought there being ALLOW none Is there another (or better) way to block all Android devices from connecting?
... View more
12-04-2014
03:47:PM
I have a snapshot there. Do I have a way to look at the info or do I need to submit it in a ticket? by the settings I have, it's just the debug info
... View more
12-04-2014
01:49:PM
Can anyone give me a bit more info on the critical error "ERR31093 - Program web recently failed"? Googled for it - Only found information about "Program dscsd recently failed". searched the forums as well as the Knowledge Center and get 0 results. Current version: 8.0R4.1 (build 31475) running 2 MAG2600 boxes in active/passive thanks
... View more
12-04-2014
07:13:AM
The main reason I see that message is that the User has selected the incorrect realm to log in to. They do have a role mapping, but it's in another realm.
... View more
10-28-2014
01:31:PM
I ran into a similiar situation recently. I found that if Network Level Authentication (NLA) is enabled on the server, it will fail because the Java client doesn't support NLA. http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB21244&smlogin=true HTH
... View more
10-23-2014
02:25:PM
Update / More Info: I found this: http://www.juniper.net/techpubs/en_US/junos12.1x47/topics/reference/general/vpn-security-dynamic-pulse-client-installation-requirement.html But for pete's sake it's refering to Pulse 2.0 (and published 5/2014) However I did pick out this piece of the puzzle. It is also not supported on 64-bit browsers. Is this still valid / true?
... View more
10-23-2014
02:03:PM
Windows 64 bit machine using IE11 and Firefox. The client downloads and installs about half way and stops. I've looked through the other posts I could find an the overfilled filter doesn't seem to be the issue or groundhog day This has worked on somewhere around 200-300 other machines fine. This is being used at another companie's site. I think there could be an issue with some kind of setting (GPO perhaps) that's stopping it from loading or the prompts to be pulled up and accepted it. So what I'm looking for is a document advising what settings need to be in place for the client to be installed via the browser. (I ended up sending a stand alone copy and it installed fine) my current Pulse installer is version: 5.0.4.47117 thanks in advance CaseyH
... View more
10-17-2014
07:21:AM
I believe it's due to the redesign of IE11. Compatibility View forces use of the old engine. http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB28018&actp=RSS&smlogin=true
... View more
10-15-2014
09:26:AM
I made the change in the older box (7.1R17 code) and it didn't kick the 2 people that were logged in.
... View more
10-15-2014
08:16:AM
I read the same, but also read that XP and Vista only support TLS 1.0 (which has it's own demons out there.. namely BEAST). Which is more so what I'm trying to wrap my head around. It looks like I just have to pick the lesser of two evils. The problem I'm facing is that I'm in the middle of migrating my clients from a SA2000 cluster (7.1R17, build 28099) to a MAG2600 cluster (8.0R4.1, build 31475). The 7.1R17 code only runs TLS 1.0 if you disable SSLv3. The 8.0R4.1 uses TLS 1.0, 1.1 & 1.2 So I've got to deal with both sides of that and make sure my people will work. I understand I can disable SSLv3 on both boxes.. .but it still leaves the older box with only TLS 1.0 to use. Ahh... if I could only get the team to move their darn people over quicker.
... View more
10-15-2014
07:49:AM
ok, so Juniper is telling us to just turn off SSLv3: From the admin GUI navigate to System > Configuration > Security and under the section Allowed SSL and TLS VersionÓ select the first option Accept only TLSÓ. This setting will ensure that SSLv3 is disabled on the server-side and any SSL connections from clients that attempt to use SSLv3 will be terminated. My question is what's the impact of turning off SSLv3 in regards to OS/Browser compatibility?
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
