How is the unbound scenario being tested?  If a end user has the pulse client and installs the client themselves, they will have the option to create their own connections until they connect following MAG device.  Once the connection is made, the Pulse connection set should be pushed to the Pulse client and enforcing the option to not "Allow saving logon information".  If this behavior is not occurring, please provide details on how this is being tested and your results. ... View more