About kcsvignesh

kcsvignesh · ‎09-20-2020

I have configured VPN connection profile DNS settings to use IVE DNS and also configured the split tunnel DNS order as - Search client DNS first, then the device. Additionally i have allowed DNS IP address in access list and split tunnel profile as well. But still NSLookup any internal URL is not working and i m unable to access internal sites with FQDN in web browser, instead of URL if i try with IP address it works. Not sure what other settings need to corrected. Please assist. Thanks in advance.

kcsvignesh · ‎07-30-2020

Finally we found a solution for this, we added custom expression rule in role mapping to block disabled user account by assingned no role. userattr.userAccountControl != 512

kcsvignesh · ‎07-25-2020

We recenlty identified our Pulse secure is allowing locked/disabled AD accounts to connect to VPN. We use certificate authentication and pulse validate the cert and it allows users to connect even if user account is locked out or disabled. we writted a custom expression rule in Pulse to check the status of the account in AD to block if any users account is locked/disabled by assigned no role. userAttr.lockouttime != 0 - Worked as expected. userAttr.msDS-UserAccountDisabled != 0 -- > Disabled user account still connect to VPN. Please suggest. Thanks in advance. version : 9.0R4.1 - PSA7000c.

kcsvignesh · ‎07-24-2020

Can youplease post the attributes for account disabled ? which you tested... Thanks...

I m unable to resolve any internal URL even after ...

Re: Unable to restrict disabled account to connect...

Unable to restrict disabled account to connect VPN

Re: Active AD Accounts vs. locked/disabled AD Acco...