Hi Everyone,   Currently setting up a Machine then User connection, i want machine connections to get an IP from a different range to the user connection. I use Windows 2016 DHCP servers which now has support for the DHCP option 118 'i think'. So im just wondering is it best to create a Virtual VLAN within Pulse or use option 118 to achieve what i want?   Thanks. ... View more

Hi all, Im currently looking into setting up certicate authentication for Windows hello for Business users - i have setup cert server and imported Trusted Client CA root cert (without keys) to Pulse, and created new realm etc which all works, but few questions as below.. When Devices connect through is there any handshake as part of the Certificate authentication process? to me it just looks like Pulse checks that there is a valid CA cert present and makes sure the cert is not revoked via CRL/OCSP if enabled. Im trying to assess the security implications of this, if someone (i.e. an attacker) was able to export or get hold of the client cert on a device then install to another non work laptop id presume Pulse would still accept it with or without the keys. Does anyone have best pratice guides on this? I'd think making sure certificate and keys are non-exportable and also storing cert in TPM is a must.    We do use other security measures such as Host checker so mainly want advice on securing certificate authentication.   Thanks.   ... View more

Hi Everyone,   Im wanting to create a new connection in a 'Machine or User' setup using certificates. Currently i have 2x certificates in the machine store from my CA which are pretty much identical so in testing Pulse Desktop client always asks to select which cert to use and i guess will cause the machine auth to fail as it wont know which cert to use, within the Pulse Secure connection settings under 'certificate matching' i can see 'custom enhanced key usage OID / Text' but this doesnt help me as both are the same in each cert.    Is it possible to use other Certificate attributes for matching? as in my case i could use Subject CN, OU etc which is different.   Many thanks. ... View more

Hi Everyone,   Im trying to configure Pulse to use 'Windows hello for business' credentials / cert as authentication. I found a Pulse WHFB guide which advises to upload CA cert (AADJ certificate) then create a new realm with cert authentication but the guide doesnt explain this step at all, i then read another post stating to setup SAML authentication method so getting confused to exactly what is required to get this working.   I did contact support but gave up after numerous calls they then sent me a document from 2015 bearing no relation to what i was trying to achieve.   Has anyone got WHFB to work with Pulse? any pointers would be appreciated.   Thanks ... View more