About Jokos

Jokos · ‎05-11-2022

Hello, So to bring a bit of light. I must say I am not very experienced with Pulse Secure , in my current job I am working for the first time with Pulse Secure. Anyway the RADIUS under Auht.Servers tab is configured : RADIUS settings 1 RADIUS settings 2 As you can see from the first image yes all is set. From the second image I am not sure as you are suggesting to check the Use VPN Tunnel Assinged IP address for FRAMED-IP-ADDRESS. My customer wants to see the very first IP that the user connected from ( something like your internet IP if you connected from home work ) as far as I understand from his talks. And there is one more thing. I created those two custom RADIUS Rules. 1/ The first one rule should pop some window with Check you mobile app for next step which I am not sure it is working as I am not exactly sure which ATTRIBUTE I will receive in Access Challenge message from RADIUS server. 2/ Second rule is more like send this info to the RADIUS server in case Accounting will not work which looks like it is not working as I see in logs this : AUT23314 2022-05-11 07:41:41 - ive - [127.0.0.1] Default Network::System()[] - Radius Accounting: Failed to send radius accounting USER session start request for xxxUsers_2FA Major AUT23314 2022-05-11 07:41:41 - ive - [127.0.0.1] Default Network::System()[] - Radius Accounting: Failed to send radius accounting NC session start request for xxxUsers_2FA So I asked the customer if they can create for me some readonly account on their new RADIUS server that they want to use for this 2MFA so I can do the TCPDUMP when I will be trying to connect from my laptop via the Pulse Secure client so I can see what Access Challenge Attribute the RADIUS is sending. And test if thet pop up window is working via that custom rule 1 or not at all.

Jokos · ‎05-04-2022

Hello As far as I know customer wants to see what IP Address the PCS see as the connection. They want to have some log from which IP Address their people were connecting as far as I understand.

Jokos · ‎05-02-2022

I think you can remove this post. There is newer topic about the same issue. I made a double post by mistake.

Jokos · ‎04-21-2022

Hello guys. I have an issue with one of our Pulse Secure GW that our customer is using for VPN connections. They want from us to send from Pulse Secure GW the information when some of thier client will connect to the Pulse Secure GW via desktop app , to send the Client IP to the RADIUS server that is handling the authenticaiton for their clients. But I am unable to find where to enable this. I tried to add variable in Auth.Servers tab -> Radius server -> Settings and in bottom half there is : RADIUS accounting where I put the variables: <USER><SOURCEIP> But looks like it is not the right place to do this. Do you know of some tips how to make it work please ? Thank you in advance.

Jokos · ‎04-14-2022

Hello team. I have issues to pass the information from our Pulse Secure Gateway to the Customer RADIUS server. They want to see this information in thier logs on RADIUS server when one of their co-workers will connect to Pulse Secure GW via the desktop app that they have installed on their PCs. But somehow I am unable to do this right. I set in the Authentication / Auth Servers / Settings and RADIUS accounting tab this : RADIUS accounting User-Name: <USER><SOURCEIP> Template for reporting user identity to RADIUS server The template can contain textual characters as well as variables for substitution. Variables should be enclosed in angle brackets like this <variable>. Click here to view a list of all variables. Examples: <USER> The user's login name <REALM> The user's sign-in realm <ROLE SEP=","> The list of ","-separated roles assigned to the user <ROLE> The first role amongst multiple roles assigned to the user Interim Update Interval: minutes Time interval to send an interim update to the accounting server (min: 15 minutes, max: 1440 minutes) Use VPN Tunnel assigned IP Address for FRAMED-IP-ADDRESS/FRAMED-IPV6-ADDRESS attribute value in RADIUS Accounting Send interim updates for sub sessions created inside parent session Maybe I need to put there different variable ? I put there <SOURCEIP> or maybe I need to check Use VPN Tunnel assigned IP Address for FRAMED-IP-ADDRESS ? Thank you for your help and reply.

Re: Pulse Secure to communicate client IP to RADI...

Re: Pulse Secure to communicate client IP to RADI...

Re: Getting source IP from Pulse Secure to the RAD...

Pulse Secure to communicate client IP to RADIUS s...

Getting source IP from Pulse Secure to the RADIUS ...