Hello world,   When setting tunnel mode ESP instead of SSL, do we still need to open inbound TCP/443 to the PCS device ? May be it is used for the Realm selection ? (www.example.com/myrealm). Because i don't see how to gather realm information without HTTP(S) communication.   Thanks a lot   ... View more

Hello world,   I need to deploy Pulse Secure Client (9.1) on 3 000 Windows machines. I gathered the MSI installer through my MyPulse portal.   However, I noticed that Host Checker is not integrated inside the installer. It means that clients machine will need to download the HC component upon the first connection to the realm, which is not so efficient... Is there a way to get a Pulse Client installer which include Host Checker components ? Did you encounter the same uscenario ?   Thanks a lot     ... View more

Hello world,   i'm setting up PSA7000 with Active Directory integration for Authentication and Authorization (standard mode). Authentication of users works well, however i'm not able to do role mappings based on rule. When I perform a Policy trace it seems that the appliance isn't able to gather groups informations. I get something like:   Variable groups = No match on rule 'groups = ('MyGroup') Realm MyREALM did not map user Domain\MyUser to any roles Sign-in rejected. Reason: No Roles   Thanks to the troubleshooting tools (in the Auth Server section), I performed a "User acess test" with a domain account and through the debug i'm able to see all the groups the user is attached to. Domain join is Green and "Basic verification" works well also. My issue come with role mapping, groups are not retrived..   May be some one have a clue about this problem ? I saw on some forums that the workaround would be to switch Authorization from Active Directory to LDAP lookup.. but i cannot understand why it doesn't work with AD as it is able to gather all groups through Troubleshooting tools..   Thanks ! ... View more

Hello,   I want to deploy a PSA appliance using only one physical port. Internal/External/Management traffic must be segmented using VLAN ID (a trunk is configured on switch side). Is it possible to do this setup ? Is it sufficient if i configure the "VLAN ID" setting on each interfaces ? Or a physical connection must be made ?   thanks a lot ... View more