- Pulse Secure Community
- :
- About tony.f
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
01-09-2019
03-15-2019
tony.f
Occasional Contributor
15
Posts
1
Kudos
0
Solutions
03-12-2019
01:54:AM
Hello, My PCS instance is hosted in AWS. Since I only have 1 instance running, the failure of this instance implies down time. My goal is to achieve a redundant architecture to avoid that without introducing vTM in the architecture. AWS best practices suggest creating multiple EC2 isntances and put them behind a load balancer. However, I have 1 issue with this setup: the license. Since I have one license for PSA, another license for concurrent vpn users, if PCS #1 fails (where both previously mentioned licesnes are installed) and the traffic is sent to PCS #2, how are the licenses transfered to the other one? How do yo automate this? If this is impossible to implement, do you suggest other approaches? Thanks in advance. Regards, Tony
... View more
02-22-2019
01:14:AM
1 Kudo
Hello, I have Pulse Connect Secure with multiple users conencted via SSL VPN. If a user forgets their password, is it possible for THEM to initiate a password reset procedure? A self-serivce instead of admin-intervention service? Thanks! Regards, Tony
... View more
02-11-2019
01:33:AM
Hello Ray, In https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB41030/, step 3: " enter the authentication (auth) code". I'm stuck here cause I only have Authorization codes not Authentication codes. And like I said before, I saw a KB where in order to get auth. codes from authoriz., I need to have the serial number. Regards, Tony
... View more
02-08-2019
01:22:AM
Hello, I want to generate license keys for my PSA hosted in AWS and to do so I need a: serial number hardware ID authorization code I went to Maintenance > Platform but I didn't find a Serial Number field there. However, on the same page near the bottom is written "Licensed to XXXXX" so I figured this is the Hardware ID. I am following this 2 KBs: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40032 https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB29853 Thanks. Regards, Tony
... View more
02-05-2019
05:08:AM
Hello @zanyterp, The tunnel IP by default is 10.200.200.200. So if I traceroute a packet sent from my machine to a network routed through PCS, the packet is sent first to 10.200.200.200. Then PCS routes it according to its table. There is no overlap between the wifi network and the vpn ip pool... Might there be a transitivity problem (intrinsic to AWS) stopping my VPN flow? Because from AWS, I can resolve DNS queries normally on my PCS appliance. I can "telnet msftconnecttest.com 80" and get a successful connected. I am pushing the correct DNS settings via VPN Tunneling > Connection Profiles. So the Pulse client is correctly configured. Regards, Tony
... View more
01-29-2019
02:28:AM
Hello Ray, VPN clients draw their IP from this pool 192.168.1.0/24. The internal interface of PCS is in a different subnet. 10.100.100.1/24. As you mentioned, I tried giving my machine a 10.100.100.x IP. Nothing works after this config. I think network overlap on PCS leads to packets forwarding failure.
... View more
01-23-2019
08:06:AM
Hello, I'm asking whether it's possible to autmate the deployment of PCS on AWS. Currently, I follow these 2 steps: deploy CloudFormation stack from template import XML config Is there a way to combine those steps? PS: there's a "PCS Config Data" in the AWS template but I can't copy paste a 90MB worth of data in that field. Maybe there's another way? Thanks, Tony
... View more
01-22-2019
03:48:AM
Hello Ray, Sorry for the tardy response. I have just done your test. What I noticed is the following: I can reach my intranet just fine. No problems there. But my wifi is down: Tcpdump shows that all attempts to communicate with internet resources are being blocked on the DNS packet level. I see queries with destination the DNS I configured PCS with, but I see no DNS resolution. Regards, Tony
... View more
01-16-2019
03:53:AM
Exactly like you described it. 10.200.200.200 is the first hop, then all Request timed out after it. There's quite a bit of lag as well.
... View more
01-16-2019
01:00:AM
Hello Ray, I'm running a Windows 10 version 1803 on my machine and a Pulse Secure Client with the 9.0.1 (571) version. After connecting to the full tunnel VPN, wifi has the yellow exclamation mark, nothing can be reached via the browser (neither internet resources e.g. microsoft.com, nor intranet resources - resources I can access using another role that has VPN split-tunneling enabled.) Regards, Tony
... View more
01-15-2019
06:04:AM
Hello Ray, I saw this KB: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB41014, so I wanted to mention that my laptop model is HP 840 G4. Just in case, I downloaded and installed HP Hotkey Support. Thought I would let you know. Thanks again for following up! Regards, Tony
... View more
01-15-2019
01:52:AM
Hello Ray, I tried allowing access to all resources (*:*) for all roles but the full tunnel VPN is still disconnecting my wifi connection... With no internet access, the VPN is down and of course the www.msftconnecttest.com/connecttest.txt test fails. Tony
... View more
01-10-2019
03:47:AM
Hello all, So I'm new to Pulse, and I'm trying to configure and test basic access management scenarios. I want for instance to restrict SSH access to a certain ressource. I allowed Telnet/SSH on the role level, but I specified a Resource Policy that denies access to the resource. But when I test this, I can still access the resource!! Even when I disable Telnet/SSH on the entire role, SSH works fine!! Should I reboot my PCS appliance for changes to take effect? I logged off and signed on after making changes with the proper user that is mapped to this role without any change... If I'm not connected to this tunnel, there's no way to access resources! So there's no a chance PCS is denying my SSH traffic but another VPN is transmitting it! Am I missing something??
... View more
01-09-2019
08:03:AM
Hello [email protected], Thanks for taking the time. Yes, yes, what I meant was to disable split tunneling!! So yes, role 2 has Split Tunneling disabled. Sorry about the mishap. As for the Wi-Fi, it gives me a yellow exclamation mark. The tunnel is up and running, I can connect to PCS at the other end of the tunnel. The VPN connection works fine. And when I end this connection on Pulse, I regain access to wifi. I don't understand why it's behaving like this! Is the Pulse Secure Desktop client the issue? PS: the Wi-Fi connection is a connection configured also on Pulse Secure (if that changes anything.) Regards, Tony
... View more
01-09-2019
05:16:AM
Hello, So I have these 2 roles on my PCS 9.0R1: one has VPN Tunneling *enabled*, while the other has the feature disabled. I have 2 Pulse Secure (v 9.0.1) connections on my machine: the 1st is for Wifi and the 2nd is for the PCS appliance. - If i connect with a username mapped to role 1 - everything works well. - If i connect with a username mapped to role 2 - the wifi is dropped. My goal is to disable VPN Split-Tunneling, so that traffic be sent by default over the Pulse VPN Tunnel, while also having access to internet for Web browsing, etc. PROBLEM: wifi disconnects if VPN Tunneling is disabled NOTE: the following features on PCS are left to their default values: - route precendence = endpoint routes (to allow access for local subnets) - Always-on Pulse Client = disabled - VPN only access = disabled - Wireless suppression = disabled - Lock down this connection = disabled Can anyone please tell me why my wifi conenction is getting dumped? Thanks in advance for any tips or guidance. Cheers, Tony
... View more
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
