KB40873 - Pulse Secure Desktop client intermittently fails with the error message "Authentication Rejected by the server (Error:1308)" for macOS Sierra machines if host checker is enabled.

This article describes an issue where the Pulse Secure Desktop client intermittently fails with the error message "Authentication Rejected by the server (Error:1308)" for macOS Sierra machines if host checker is enabled.

After the machine recovers from sleep/hibernate mode, the Pulse connection intermittently gets failed with an error "Authentication Rejected by the server (Error:1308)" on MAC Sierra machines if Host Checker is enabled.

In the debuglog, the following entries will appear:

00267,09 2017/05/29 10:01:57.646 1 root dsAccessService HostCheckerServicePS p0065 tAB1B DOproxy.mm:354 - 
'HostCheckerServicePS' DO exception 'NSObjectInaccessibleException' in IHostCheckerImpl::ReceiveMessage. Reason: NSDistantObject (0x7921ea60) is invalid (no connection)
00164,09 2017/05/29 10:01:57.647 1 root dsAccessService eapService p0065 tAB1B HostCheckerClient.cpp:361 - 
'TestAndHandleError' ReceiveMessage failed with error 0xe0010002

This issue occurs due to a system recovery state which leads to a system call error and host checker not properly launching.

This issue is only applicable to OPSWAT V4 when the checkbox for Activate Older Opswat SDK in ESAP for Host checker policy evaluation is disabled. 

This issue is resolved in ESAP version 3.1.5.

• ESAP Version 3.1.5 Software is now available for download on Pulse Secure Licensing and Download Center

 

Workaround:

• Roll back to OPSWAT V3 by enabling the checkbox for Activate Older Opswat SDK in ESAP for Host checker policy evaluation
• Disable Host Checker