Pulse Secure Connections then Internet Access (No Internet Access) the issue is most likely that the admin has enabled the option to send all traffic through the tunnel. due to changes in windows, the connection is marked (erroneously) as down. ... View more

thank you for that idea, @yutsi ... View more

hello,   i think, you already know the manual? https://help.ivanti.com/ps/help/en_US/PPS/9.1R14/pcsppsrapisg/overview.htm#_Toc53640461 I was struggeling on the same point... please make/take  the first steps with curl to check connections/passwords/accounts/... and for further actions a key is prefered auth method. if you use windows, in linux subsystem should be curl also be available if you use a device certificate, you might tell curl to deactivate using certificates... ?--no-certificates? curl got a great man page i am not sure, but i fear the encoding might be the reason... - but sadly I do not know your IDE... good luck. ... View more

thank you for the update/information, @scoutt that it is working successfully for you with the updated softwares ... View more

you can choose to allow/disallow user connections and changes as well as connect/disconnect ... View more

Hello, So to bring a bit of light. I must say I am not very experienced with Pulse Secure , in my current job I am working for the first time with Pulse Secure.   Anyway the RADIUS under Auht.Servers tab is configured : RADIUS settings 1  RADIUS settings 2    As you can see from the first image yes all is set.   From the second image I am not sure as you are suggesting to check the Use VPN Tunnel Assinged IP address for FRAMED-IP-ADDRESS.  My customer wants to see the very first IP that the user connected from ( something like your internet IP if you connected from home work ) as far as I understand from his talks.  And there is one more thing. I created those two custom RADIUS Rules.  1/ The first one rule should pop some window with Check you mobile app for next step  which I am not sure it is working as I am not exactly sure which ATTRIBUTE I will receive in Access  Challenge message from RADIUS server.    2/ Second rule is more like send this info to the RADIUS server in case Accounting will not work which looks like it is not working as I see in logs this : AUT23314 2022-05-11 07:41:41 - ive - [127.0.0.1] Default Network::System()[] - Radius Accounting: Failed to send radius accounting USER session start request for xxxUsers_2FA Major AUT23314 2022-05-11 07:41:41 - ive - [127.0.0.1] Default Network::System()[] - Radius Accounting: Failed to send radius accounting NC session start request for xxxUsers_2FA So I asked the customer if they can create for me some readonly account on their new RADIUS server that they want to use for this 2MFA  so I can do the TCPDUMP when I will be trying to connect from my laptop via the Pulse Secure client so I can see what Access Challenge Attribute the RADIUS is sending.   And test if thet pop up window is working via that custom rule 1 or not at all.       ... View more

yes, you are correct that there is no equivalent for the gateway ... View more

@yutsi That's good news, I am glad to know that it worked :) It striked me when you said it doesn't proceed further after logging to the IE page... since you're interested to know the BTS, activated 5.1Rx client version is the culprit as it will get the wrong path (more to do with the manifest file - advanced topic) to the setup client, path as in the where pulse client is installed i.e. C:\Program Files(x86)\Common files\Pulse Secure\Pulse\PulseSecureVersion.ini.   Background: 5.1Rx is a a non-rebranded client version, per my understanding i.e. it will be installed to a Juniper networks folder instead of Pulse Secure. Hence, what was happened is the setup client received a launch command to look for pulse client in a Juniper networks folder, but the 9.1Rx client (as a courtesy of rebranding done in 5.2Rx client above - installed to Pulse Secure folder) would not be there... setup client would be like..uh oh! Pulse client is not installed on this machine and it would try to download the 5.1Rx client (activated version) from the VPN server, now why it's not downloading in your case..coz. you have *disabled installations through the web portal*   Now, why it got fixed after changing the Pulse Client 5.3Rx as default.... you got it! Rebranded client version - right path info - 9.1Rx client found - launched successfully.   Sorry, it's too much information.. hope you got this now. :) Thanks.   ... View more