In the 9.x code, you can also leverage REST API to do a lot of things. 9.1R9 PCS/PPS REST API Solutions Guide   Here is the DMI Guide https://www-prev.pulsesecure.net/download/techpubs/current/711/pulse-connect-secure/pcs/8.2rx/ps-pcs-sa-8.2r3-dmi-solution-guide.pdf   Good luck.   Also to the         ... View more

Have you tried to disable the Pulse adapter?  Does that resolve the crash?  Uninstalling the app "should" remove the adapter.  Did you remove Pulse via the standard method or did you just delete directories manuall?   Again, please have your IT group open a case with us so we can get more data to our developers.  The more crash report data we get, the better.   Thanks   Craig Brauckmiller ... View more

You can do the same with Pulse.  PCS supports the IKEv2 protocol and we've had customers use that solution on Windows with success.  The only downside is that there is no host check option when using the native vpn clients.   Just food for thought.   Also, it may be good to understand what the real issue is here.  Is it that you don't want the client to load and show the splash screen (which is configurable) or is the Pulse Client causing some issue like an inability to connect to a network resource or the internet.   Thanks   Craig Brauckmiller Pulse Secure ... View more

For your issue, we're recommend opening a support case and supply your client side logs so we can take a look and see where things are going wrong.   It is a two step process for authenticating and getting your tunnel up.   1.  Over HTTPS, we authenticate and run any host check rules as defined on the VPN appliance.  2.  Once auth is completed, the client should then either establish an ESP tunnel (UDP 4500) to the appliance or it will use the existing HTTPS connection for the tunnel.  During the tunnel setup, your endpoin will get an IP address for the virtual adapter either via DHCP or via an IP pool configured on the appliance.  If no IP is given for whatever reason, the tunnel will not come up.  So, you can save off the client logs from Pulse and then look at the ifconfig and netstat output to see if the virtual adapter got an IP address.   Additionally, Pulse has not qualified Ubuntu 20.x  as yet.  19 and below are qualified and officially supported.  Refer to this for a complete list : https://www-prev.pulsesecure.net/download/techpubs/current/2198/pulse-client/pulse-secure-client-desktop/9.1rx/ps-pulse-9.1r9.0-supportedplatforms.pdf   Thanks   Craig Brauckmiller Pulse Secure ... View more

Hello and thank you for the post. Can you please open a support case and have our support rep file a bug for this?   Thank you   Craig Brauckmiller Pulse Secure ... View more

Hello and thanks for the post.   We do not support any 3rd party command line tools to create VPN connections for the Pulse Client.  Our appliances can create a "preconfigurataion" file that is basically XML.  You can export that XML and use our jamCommand CLI tool to configure the Pulse Client on the workstation.   This process is covered in the Pulse Client Admin Guide that can be found here : https://www-prev.pulsesecure.net/download/techpubs/current/2196/pulse-client/pulse-secure-client-desktop/9.1rx/ps-pulse-9.1r9.0-admin-guide.pdf   Thanks   Craig Brauckmiller Pulse Secure ... View more

Hello and thank you for the post.   A bit more information is needed here. 1.  Are you connecting to a Pulse Connect Secure appliance?  Or Juniper SRX firewall? 2.  Do you know if your VPN administrator has setup VPN On Demand? 3.  How many connections are configured on the Pulse Client when you open the user interface?   Thanks   Craig Brauckmiller Pulse Secure   ... View more

At this point, I'd recommend opening a case with our support team.  Sounds like we'll need to do a remote session with you so we can capture the traffic and then craft an updated filter if our standard rewriter engine isn't working.  We've had other customers use JIRA through Core Access without issue in the 9.x releases of PCS.   Thanks   Craig Brauckmiller Pulse Secure   ... View more

All, what version of Java is installed on these Macs?  We've seen cases with the 261 and later build of Java.  The issue is not seen on the 251 build.  (Java 8 Update 251).   We have a bug open internally, but for now...we would suggest testing with the 251 build of Java.   Thanks   Craig ... View more

Hello and thank you for the post.   There is a known issue in PCS 9.1R4 and below on the VM version where a user would receive the Internal Error message.  This was primarily reported on the Admin UI pages, but it is very possible that the same issue is being seen here.  That issue if corrected in PCS 9.1R5 and later.   I'd recommend upgrading the VM to at least PCS 9.1R8.2 or PCS 9.1R9 as there are also numerous security vulnerabilites addressed in those releases.   Thank you   Craig Brauckmiller Pulse Secure ... View more

Hello and thank you for the post. It comes down to how the VPN appliance is configured.  Pulse Connect Secure can be configured in a couple different ways.   * Full Tunnel - All traffic from your workstation is sent down the tunnel to the VPN appliance which should in turn send the traffic out to the internet from the corporate office's internet connection. * Split Tunnel - This mode allows the VPN admin to specific which corporate resources are to be tunneled and all other traffic should go out via the local physical interface on your PC.   A simple traceroute from your Win 10 box will tell you which way the traffic is going out.  Do you know if you are the only user facing this problem?  Your IT department should open a case with support if they are unable to determine the root cause of your issue.    Thank you   Craig Brauckmiller Pulse Secure ... View more

You are on the right track, but instead of removing the Web ACL policy, edit the below section and enable HTTP 1.1   Resource Policies > Web Protocol Policies > Initial Web Protocol Policy   Let us know if that helps.   Thanks   Craig Brauckmiller Pulse Secure ... View more

Just curious, how large is the file you are downloading and what is the file name?   Thanks   Craig Brauckmiller Pulse Secure ... View more

Hello and thanks for the post.  I'll move this post over to the vADC forum as the PSAs themselves have nothing to do with actual load balancing behavior.  It is possible that our health check is misreporting the status ot the appliances, but we'll need a vADC expert to comment on this.   Thanks   Craig Brauckmiller Pulse Secure ... View more

All, it does appear that this is a slightly different issue than what was reported earlier with KEXT and Pulse.  Do any of you have access to the PCS Appliance Admin UI?  If so, I'd like ot know if the role you are assigned to has the Traffic Enforcement option enabled?  This feature will install a network filter driver on the Mac and seems to be causing an issue.   If you open the network settings page, do you have a Pulse Secure adapter listed?   I'd request that those who are seeing the crash reports, PLEASE, open a case with us so we can collect all of the appropriate configuration data and client logs.   Thank you   Craig Brauckmiller Pulse Secure ... View more

I've not tried it on the board, but there is an option to attach files.  I would recommend against that as anything posted may be public and viewable by all visitors.  If you do post, you should sanitize the logs and remove any usernames or IP addresses or any other PII (Personal Identifiable Information).  You would be better off opening a case with our support team to carry this forward.   Thank you   Craig ... View more

Thanks for the reply.  I failed to answer your previous question.  Pulse has not qualifed or test WSL2 Linux...so I don't know if the client will work as expected.   The client config won't really tell me much as the config is sent dynamically from the server side everytime you connect.  Things like what networks are allowed and not allowed, traffic enforcement, etc. We'd need to see the debug logs from the client side to get an understanding of what is going on.   Also, are you using the Windows Pulse Client or the Linux client to connect?  Should have asked that at the start.  If you are running the Windows Client, you can open the client, go to the File menu, select Connections and then select Advanced Connection Details.  This will pop up a window and will show you the tunnel configuration for your active connections.  Are there any networks that overlap with your local nets?   Thanks,   Craig ... View more

Hello and thanks for the post.   The only way to really troubleshoot what is going on is by looking at the Pulse log files from the client.  Open the Pulse App and select File > Logs > Save As.     This will create a ZIP file with all of the logs we need to troubleshoot this.  The debug logs in the zip file is where we need to look.  Failing that, you can also contact the admin of the VPN appliance and they can look at the user access logs to see if you are getting hung up on a step of the connection.   Thak you,   Craig Brauckmiller Pulse Secure ... View more

Hello and thank you for your post.  Without knowing the specifics of the VPN policy for your company, I can only assume that your connection is set for FULL TUNNEL aka Disable Split Tunnel.  In other words, all traffic is sent down the tunneled interface to the appliance...this would include non-company related internet traffic.  In other words, you are basically a virtual node on your company's subnet as if you were in the office.  If your company doesn't explicitly allow traffic for sites and denies all non-company related traffic, this could explain the behavior you are seeing.  Again, this is speculation on my part.   There are also config options avialble to the VPN administrator where they can limit your access to local subnets on your home network.  You should consult your IT department to see if this is the case or not.   Thank you Craig Brauckmiller Escalation Manager Pulse Secure ... View more

Hello, when troubleshooting these types of issues, please try the following to assist in troubleshooting.   1.  Can you ping the PCS appliance from a terminal window by IP address and dns name?  Does the DNS name resolve to the correct IP address? 2.  Can you take s packet capture (Wireshark or TCP DUMP) on the Mac and see if the session is attempting an HTTPS connection from the Mac to the PCS appliance?  If you are familiar with TCP troubleshooting, is the TLS handshake happening?  Do you see the Server Hello and Client Hello messages? 3.  Are you running an antivirus / antimalware product that can blacklist or block traffic from specific applications?  Does disabling it, as a test, allow the connection? 4.  If you have access to the PCS appliance admin interface, do you see any log messages relating to your public IP address and username? 5.  Does your organization have another appliance in a different region that you can connect to?  Does that work?   If the above doesn't help you resolve the issue, then we would request that you open a support case with us so we can better assist you.   Thank you   Craig Brauckmiller Escalation Manager Pulse Secure ... View more

Below are the contact numbers for Pulse Secure.  However, you will need whoever manages the Pulse Applaince to open this ticket as they will have the serial number for the actual appliance.  Our customer care team will need to validate the support contract on that appliance and then can dispatch the ticket to our support team.   https://support.pulsesecure.net/support/support-contacts/   Thank you Craig ... View more

Hello and thank you for the question.   What version of Pulse are you using?  What wireless NIC is in use on your workstation? Depending on how things are configured on the VPN appliance, this coule also impact the behavior.  We'd need to have your customer open a case with Pulse to discuss the config and help you troubleshoot this issue.   Thank you   Craig Brauckmiller Escalation Manager Pulse Secre   ... View more

The Pulse Secure Applainces are hardened devices and as such, we do not allow shell level access.   What type of issues are you wishing to troubleshoot?  We do offer various logs for some services such as SAMBA to assist in troubleshotting.  Navigate to Maintenance > Troubleshooting > Diagnostic Logs   Thank you   Craig Brauckmiller Escalation Manager Pulse Secure ... View more

Pulse Secure has never qualified the Linux Pulse Client to work with the SRX Firewall VPN.  We have qualified both the Mac and Windows clients however.   I would recommend that you contact Juniper Networks for their assistance here.   Thank you   Craig Brauckmiller Escalation Manager Pulse Secure ... View more

This message is an indication that the UDP packets between your endpoint that the PCS appliance are getting dropped.  We will fall back to SSL (TCP 443) to try and recover.  This type of drop is common on cellular networks when roaming between towers as well as basic ISP problems.     To properly troubleshoot this, you'd need a packet capture from the endpoint on the physical interface as wel as a capture on the public facing interface of the PCS appliance.  You'll need to match up the ESP packets by using the sequence number and see if there are large gaps in the sequence numbers. You should check to see if the endpoint is sending them and if the PCS is receiving them.     Make sense?   Thanks   Craig Brauckmiller Escalation Manager Pulse Secure ... View more

All, if you haven't already done so, please try the Pulse Client 9.1R8.2 release.     There was a fix for PSAL (Pulse Secure Application Launher) on MacOS. PRS-389976   Setup client unable to invoke PSAL on MAC machines   If this is a diffrenetn issue, please open a support case with us.   Thank you   Craig Brauckmiller Global Escalation Manager Pulse Secure     ... View more

Hi, thank you for the question.  Can you describe the environment you have? What version of PPS are you using? What version of teh Pulse Client?  Are you using the Pulse Clent? Is this environment using 802.1X or is this a layer 3 environment? What LDAP server are you using? ... View more