About Pulse-60bpm

Pulse-60bpm · ‎05-20-2022

Thanks for the speedy response! - I'll have a go at creating something.. But yes "training" there's a thought! :) @zanyterp wrote: i don't think we have anything like that. at a high level, you will want to create your configuration in the following order: auth server(s) role(s) realm(s) sign-in policy(ies) ACLs it might be best to reach out to your sales team to purchase either training or some time with our professional services team to go over what you are looking for and answer more-specific to your deployment

Pulse-60bpm · ‎05-20-2022

I need a web page where my VPN users can download new connection sets and/or upgrades. I can see documentation that implies this is normal/standard but I have no idea where to start and connot find any docmentation on "How to" -- We don't use "Automatic Uprade" on the appliance but I need to send out a new connection set to those who need it (Random group) - Can someone either walk me through how to, or suggest another wat you deliver connection sets. I inherited this appliance and it's in a mess.. Thanks in anticipation

Pulse-60bpm · ‎03-07-2022

Hey KAS, You seemed to put a lot of effort into this, did you come up with a solution? Really curious as this is affecting us in a bad way. We use FortinetSSO and the multiple entries in DNS are causing havoc withour staff. THanks

Pulse-60bpm · ‎12-02-2021

Can anyone point me to any simple documentaion that shows the order of steps needed to create a whole new set up, from sign-in policies and Auth-servers, User realm and user roles, recource policies and resource profiels.. i.e. What comes first? We have existing things set up but it's been set up over time and the guys who set it up have gone. I want to start a fresh. I diagram of how the various "profiles" and settings interlink/overlap would be useful. Please can anyone point me in the right direction?

Pulse-60bpm · ‎11-15-2021

Has anything changed with this? We would like to direct emails to a specific address (shared mailbox) so that if the person registered on my.pulslesecure.net is on leave or longtime sick, we can still get the alerts? @kita wrote: Yes. There is a plan to sent emails for all security advisories. Currently, all users enrolled on my.pulsesecure.net are automatically subscribed, but subscription system is not in place yet.

Pulse-60bpm · ‎04-22-2021

Hello. I am still working on getting our appliance upgraded. We held back over lockdown as we have virtually all our workforce connecting back using Pulse, 1500 users and despite our software 9.0R4.1 being out of support didn't want to risk the upgrade. However with this new vulnerability and our innability to intall the workaroud, are kinda forced to do the upgrade. I haven't done one before and would like to know the best way of deploying the Client? My predecessor pushed it our using SCCM so he could control the groups it wasbeing pushed to. I can't get my head around this, if we use SCCM do we deploy the client first then upgrade the appliance or visa-versa? OR is the simplest way to push the client from the Appliance automatically? I did try to "google" it but I'm absolutely getting nowhere. If any of you techies can assist or point me in the right direction I'd be greatly appreciative.

Pulse-60bpm · ‎04-21-2021

Thank you so much for this.. I'll have a read and hopefully this is what i need. Thank you.

Pulse-60bpm · ‎04-21-2021

Can I go from 9.0R4.1 to 9.1R10 ? Or do I have to install earlier releases?

Pulse-60bpm · ‎04-21-2021

Our long serving Pulse SME has retired today, leaving me to look after the appliance. PSA5000 running 9.0R4.1 - I have been left with a potentially urgent upgrade and need to understand some basics. Can I upgrade from 9.0R4.1 to 9.1Rx in one step? i.e. Will I have to do minor upgrades first? And also, the client: The client is v. 9.0.4 - is there a specific client I need to match the system software? I pressume the client will need to be 9.1.x ? Any advice/assistance would be greatly appreciated as there was only so much my predecessor could share (and that was all operational) Thanks

Pulse-60bpm · ‎02-26-2021

Cheers @elevator4 , It is the exact same senario, it is clear that in best, the split tunnelling IS working because the performance gains have been phenominal (not sure I've ever typed that word...) But what made me query this, was due to the fact that we had an authentication issue with our Fortigateway / Web filter that was no automatically picking up authenticated users from AD/FSSO so everyone was being asked to re-authenticate.. This seemed to be having an adverse effect on our users being able to use teams, we'd either get a message saying that we weren't connected, or, the pressence side of things wasn't working (available, busy etc) or we couldn't send chat. (Video and audio seemed to not be affected) I had also played with persisten routes on the routing table to ensure that the traffic was destined to the correct gateway, but launching teams seemed to overwrite some of the addresses that would fall into the 52.112.0.0/14 network and send them out over the VPN... I agree, hearing from others would be great. Thanks for your message.

Pulse-60bpm · ‎02-25-2021

Hello, on Friday 19th, I implemented split tunnelling for O365 as per the Pulse documents and latest MS docs. All seems to be going well and we have seen a noticable improvement in the Throughput and CPU usage of our 5K appliance. However, I have noticed that despite the rule in place, I still see quite a large amount of TEAMS traffic trying to traverse the VPN, where it will be proxied by the on prem proxy. We are having a few authentication issues with our proxy today and as a result this has impacted on teams. The destination I noticed in wireshark that was still traversing the VPN was neu1-api-teams.cloudapp.net [52.113.205.119] this should be covered by the 52.112.0.0/14 network and the two FQDN's *.teams.microsoft.com and teams.microsoft.com https://community.pulsesecure.net/t5/media/gallerypage/image-id/488iA812AF15C4726146 Does anyone have any suggestions as to why the traffic is still traversing the VPN?

Pulse-60bpm · ‎02-19-2021

Hello, I have just (This last week) been told that I will be looking after our Pulse Secure appliance. We are not fully up to date, and are reluctant to upgrade as most of our workforce are working from home via Pulse. System Version 9.0R4.1 (build 64091) My question is just around what is being displayed on the dash board and is confusing. When I look at the Status/Activity tab it shows our active users (798), but then in the next display shows we have 777 current SSL sessions. If I look at the "Active Users" tab the majority of sessions are displayed as ESP, which is how we have the box configured, to use ESP over SSL. So, can anyone tell me what the 777 SSL connections represents? This is because the Device (PSA5K) can handle 1Gpbs ESP but only 550Mbps SSL throughput, and when I am trying to work out if we are hitting 75% utilisation I'm not sure if I should be looking at SSL or ESP. I hope that makes sense? If anyone can advise I'd be grateful. Jon

Re: Starting from scratch

From scratch - I need a web page where my VPN us...

Re: Pulse Secure Client - Registering DNS

Starting from scratch

Re: RSS feeds for security advisories

SCCM or Appliance push

Re: Noob upgrade.

Re: Noob upgrade.

Noob upgrade.

Re: Traffic not honouring the split tunnel configu...

Traffic not honouring the split tunnel configurati...

SSL/ESP confusion