Hi Everyone,   Currently on Opswat V3 here and eager to update to V4 slightly hestitant as we still have a handful of Win7 devices (sigh), noticed in the latest ESAP release notes for Opswat v4 that only Windows Firewall V6 and V10 are supported but one of our current Win7 policies uses Windows Firewall v7 detection/remediation.   Is anyone here using Opswat V4 and able to create a Win7 policy for its firewall detection / remediation? If not is there a custom process i could monitor, I have found the service name which looks to be  mpssvc unsure if there is a specific process i can monitor for this :/.    Thanks. ... View more

Hi all, just after some advise on the correct way to setup accessing office365 apps (Outlook etc) via web app link (resource profile) within Pulse with SSO (Azure AD) if possible. Anyone done this before? thanks ... View more

Hi Everyone,   Currently testing Pulse in 'Machine then User' setup using certificate auth. Its working all ok but noticed a couple of oddities in the user log. Such as user 'system' attempting to connect instead of the current user thats just logged in, then a few seconds later the  the correct users details are passed through and connection is established, and Host checker failing but then immediately  passing a second later. I think Pulse is just a bit quick off the mark when other system services etc are still starting, is it possible to delay the Pulse Service / Program autostart by a few seconds to see if it fixes this? Would it be the Service i need to delay? or the Pulse application?   Thanks. ... View more

Hi Everyone,   Currently setting up a Machine then User connection, i want machine connections to get an IP from a different range to the user connection. I use Windows 2016 DHCP servers which now has support for the DHCP option 118 'i think'. So im just wondering is it best to create a Virtual VLAN within Pulse or use option 118 to achieve what i want?   Thanks. ... View more

Hi all, Im currently looking into setting up certicate authentication for Windows hello for Business users - i have setup cert server and imported Trusted Client CA root cert (without keys) to Pulse, and created new realm etc which all works, but few questions as below.. When Devices connect through is there any handshake as part of the Certificate authentication process? to me it just looks like Pulse checks that there is a valid CA cert present and makes sure the cert is not revoked via CRL/OCSP if enabled. Im trying to assess the security implications of this, if someone (i.e. an attacker) was able to export or get hold of the client cert on a device then install to another non work laptop id presume Pulse would still accept it with or without the keys. Does anyone have best pratice guides on this? I'd think making sure certificate and keys are non-exportable and also storing cert in TPM is a must.    We do use other security measures such as Host checker so mainly want advice on securing certificate authentication.   Thanks.   ... View more

Hi Everyone,   Im wanting to create a new connection in a 'Machine or User' setup using certificates. Currently i have 2x certificates in the machine store from my CA which are pretty much identical so in testing Pulse Desktop client always asks to select which cert to use and i guess will cause the machine auth to fail as it wont know which cert to use, within the Pulse Secure connection settings under 'certificate matching' i can see 'custom enhanced key usage OID / Text' but this doesnt help me as both are the same in each cert.    Is it possible to use other Certificate attributes for matching? as in my case i could use Subject CN, OU etc which is different.   Many thanks. ... View more

Hi Everyone,   Im trying to configure Pulse to use 'Windows hello for business' credentials / cert as authentication. I found a Pulse WHFB guide which advises to upload CA cert (AADJ certificate) then create a new realm with cert authentication but the guide doesnt explain this step at all, i then read another post stating to setup SAML authentication method so getting confused to exactly what is required to get this working.   I did contact support but gave up after numerous calls they then sent me a document from 2015 bearing no relation to what i was trying to achieve.   Has anyone got WHFB to work with Pulse? any pointers would be appreciated.   Thanks ... View more