About mgilan

mgilan · ‎01-15-2020

I do not see any L3 VPN related issues in r3 at the moment, but I will monitor this closely - thanks for the info. Regarding the "msft html5 rdp", are you referring to the added support for 'RDWeb' resource profiles? I saw that in the r2 RN; as it is configured under web profiles, I didn't have a close look yet. On the other hand, I'm not saying that it might not affect the existing HTML5 profiles under the hood.

mgilan · ‎01-15-2020

That's the first time I see this. HTML5 RDP w/o SSO do work for me for "ages" - I simply do not fill in the <USER> and <PASSWORD> vars. Anyway, the customer got a testing non-SSO profile working yesterday: 1. Disable NLA 2. change the registry key Windows-->Run-->regedit-->HKEY_LOCAL_MACHINE-->System-->CurrentControlWindows-->Run-->regedit-->Set-->Control-->TerminalServer-->Winstations-->Rdp-tcp-->Securitylayer We will have to do more testing on this.

mgilan · ‎01-07-2020

Hi, I upgrade customers PSA cluster from 9.0r4 to 9.1r3, and HTML5 RDP profiles without SSO stopped working. The same profiles, but with SSO, work ok. When I did packet-capture, I can see that the non-SSO sessions terminate because of "Encrypted Alert". Unfortunately, I don't have access to the server logs at this moment and will have to ask the customer to review those. In PSA logs, those connections do look as very quick, but successful. Is anyone facing the same issue?

mgilan · ‎08-26-2019

Hi, I think you will loose logs after rollback. You'll have to schedule a maintenance window and arrange access to the serial-console. What's the appliance model?

mgilan · ‎08-06-2019

Well, IT might have a reason to configure the VPN to connect after login or when outside of LAN. As much as this could be frustrating for end-users, I don't want them to have an option to disable pre-installed and pre-configured VPN client—in general, not only Pulse. I wouldn't compare VPN client to Skype, Dropbox, etc. If you still want to disable Pulse after login, download an app I made years ago. https://www.dropbox.com/s/ydia177zvw38vga/Unload%20Pulse.app.zip @ariadthere's plenty of other solutions out there—why stick with something you hate?

mgilan · ‎08-06-2019

Hi. Several customers of mine have users connecting using a cellular network. This is never 100% and depends on the quality of reception/connection. For more details, look at the Session Roaming overview—KB30329.

mgilan · ‎07-29-2019

Hi, Could it be that the "tree" in your AD is too big and takes some time to browse? Or it also might be that a primary authentication server is not responding, and there's a timeout until failover. Policy tracing for pre-auth, auth and role mapping might help to find out what's going on.

Re: HTML5 RDP doesn't work without SSO

Re: HTML5 RDP doesn't work without SSO

HTML5 RDP doesn't work without SSO

Re: Access lost after an upgrade to 8.3R7 Build 65...

Re: Pulse Secure Stopping from opening at startup ...

Re: Thoughts on Pulse Secure VPN?

Re: Delay between anthentication and login