About Pulse-60bpm

Pulse-60bpm

Cheers @elevator4 , It is the exact same senario, it is clear that in best, the split tunnelling IS working because the performance gains have been phenominal (not sure I've ever typed that word...) But what made me query this, was due to the fact that we had an authentication issue with our Fortigateway / Web filter that was no automatically picking up authenticated users from AD/FSSO so everyone was being asked to re-authenticate.. This seemed to be having an adverse effect on our users being able to use teams, we'd either get a message saying that we weren't connected, or, the pressence side of things wasn't working (available, busy etc) or we couldn't send chat. (Video and audio seemed to not be affected) I had also played with persisten routes on the routing table to ensure that the traffic was destined to the correct gateway, but launching teams seemed to overwrite some of the addresses that would fall into the 52.112.0.0/14 network and send them out over the VPN... I agree, hearing from others would be great. Thanks for your message.

Pulse-60bpm

Hello, on Friday 19th, I implemented split tunnelling for O365 as per the Pulse documents and latest MS docs. All seems to be going well and we have seen a noticable improvement in the Throughput and CPU usage of our 5K appliance. However, I have noticed that despite the rule in place, I still see quite a large amount of TEAMS traffic trying to traverse the VPN, where it will be proxied by the on prem proxy. We are having a few authentication issues with our proxy today and as a result this has impacted on teams. The destination I noticed in wireshark that was still traversing the VPN was neu1-api-teams.cloudapp.net [52.113.205.119] this should be covered by the 52.112.0.0/14 network and the two FQDN's *.teams.microsoft.com and teams.microsoft.com https://community.pulsesecure.net/t5/media/gallerypage/image-id/488iA812AF15C4726146 Does anyone have any suggestions as to why the traffic is still traversing the VPN?

Pulse-60bpm

Hello, I have just (This last week) been told that I will be looking after our Pulse Secure appliance. We are not fully up to date, and are reluctant to upgrade as most of our workforce are working from home via Pulse. System Version 9.0R4.1 (build 64091) My question is just around what is being displayed on the dash board and is confusing. When I look at the Status/Activity tab it shows our active users (798), but then in the next display shows we have 777 current SSL sessions. If I look at the "Active Users" tab the majority of sessions are displayed as ESP, which is how we have the box configured, to use ESP over SSL. So, can anyone tell me what the 777 SSL connections represents? This is because the Device (PSA5K) can handle 1Gpbs ESP but only 550Mbps SSL throughput, and when I am trying to work out if we are hitting 75% utilisation I'm not sure if I should be looking at SSL or ESP. I hope that makes sense? If anyone can advise I'd be grateful. Jon

Re: Traffic not honouring the split tunnel configu...

Traffic not honouring the split tunnel configurati...

SSL/ESP confusion