About michael.l.fusco@jpl.nasa.gov

michael.l.fusco@jpl.nasa.gov · ‎08-23-2021

Multiple Admin URLs: One for LDAP(S) based which uses LDAP user/pass One for back up with a local account(s) which rotate passwords every 30 days and Source Based to specific subnets... so think Out-Of-Band. The multiple admin Realms allow for vareity of back end AAA services.

michael.l.fusco@jpl.nasa.gov · ‎07-27-2021

Has Anyone every use the Pulse Secure Profiler PPS to do this?

michael.l.fusco@jpl.nasa.gov · ‎07-27-2021

Figured Out: Admin Realms > Admin RSA > General Define Directory/Attribute Server to be LDAP Admin Realms > Admin RSA > Role Mapping New Rule: Rule based on: Group Membership (Option does not appear unless Above is done) Add the Group(s) to the PCS then define the MemberOf rules.

michael.l.fusco@jpl.nasa.gov · ‎07-26-2021

What about Dynamic Role assingment? Can the PCS every "15 mins" query the status of a User's Object in LDAP and if an Attrb or membership change move the Active session from a "role-allow" to a "role-quarentined"

michael.l.fusco@jpl.nasa.gov · ‎07-26-2021

Hello Community, We read thru the manuals, checked the 9.1R11 Administrator Authentication Realms for Role Mapping... and do not see an option or "Group Memebership" like we do unser User Realms Role Mapping. Also when using the Custom Expression, there is no tab for defining the groups... So has anyone got Administrator Authentication Realm to use "memeberOf" vs. static list of "is username"

michael.l.fusco@jpl.nasa.gov · ‎07-21-2021

Hello Community, Looking for a way to enforce disconnection of an Active VPN Session when the LDAP user status is changed form "Employed" to "Terminated". Taking all Ideas.

Re: Administrator Authentication Realm based on Gr...

Re: Looking for a Method to Disconnect Active Sess...

Re: Administrator Authentication Realm based on Gr...

Re: Looking for a Method to Disconnect Active Sess...

Administrator Authentication Realm based on Group ...

Looking for a Method to Disconnect Active Session,...