The following solutions have been implemented by our customers successfully,
Solution # 1: Disable the Juniper Network Services from the physical and virtual adapter: (If the Pulse connection is being used to connect to an SRX device, then this should not be performed. See below for a workaround that can be applied to SRX connections).
Method :1 - Automated (Applicable to Pulse Desktop Client 9.1R5 or later & PCS 9.1R1 or later).
Install/Upgrade to Pulse Desktop Client 9.1R5 (Scheduled to be released by April, 2020) on end-points and following the steps below,
- Login to the PCS Admin page (New UI Only).
- Navigate to System -> Configuration -> Advanced Client Configuration.
- Add the following content under “Enter advanced configuration in XML” and Save Changes,
Method :2 - Manual
- This method is applicable only to Windows 10 End Points & can be safely implemented even if only a subset of machines are affected (This implementation doesn't affect Windows 7/8 Machines in any way).
- During the first Pulse Desktop Connection (9.1R5), the Windows End-Point will get the instructions from PCS to disable “Juniper Network Service” from all the adapters (Including Virtual Adapter) and the changes will remain as-is for any subsequent connections to PCS (Unless changed manually or setting the value to FALSE on the PCS Device).
- Users may notice a few seconds delay compared to the normal behavior during their very first connection.
- XML addition on PCS will not affect the Pulse clients below 9.1R5 in any way.
- There is no other way of implementing this Method.
- Open Control Panel and select Network and Sharing Center the select Change adapter settings.
From a DOS command prompt run the command:
-Start > Run > ncpa.cpl
- Locate the physical adapter in the Network Connections
- Right-click on the adapter and select Properties.
- From the list, uncheck the checkbox for Juniper Network Service
- Connect with Pulse Desktop Client. (This is necessary to change the virtual adapter settings. If the Pulse tunnel is not connected, the virtual adapter does not appear in the Network Connections.)
- From the Network Connections, select Pulse Secure virtual adapter
- Right-click the adapter and select Properties
- From the list, uncheck the checkbox for Juniper Network Service & Click OK
8. Alternatively, the same can be achieved upon running the following command from PowerShell (Running as an Admin)
Disable-NetAdapterBinding -Name * -DisplayName "Juniper Network Service"
Note : Replace * with specific Adapter display name if you do not wish to disable "Juniper Network Service" on all the adapters.
Solution # 2: Disable RSC from the physical adapter: (If Pulse is being used to connect to an SRX device then the Juniper Network Service needs to remain enabled. In this case, follow the steps below to disable RSC from the physical adapter.)
- Open Powershell (Run as Administrator)
- Run the following command to determine which adapter RSC is enabled on:
If RSC is enabled on the Wi-Fi adapter, for example, the following output will be seen:
- Run the following command to disable RSC on the Wi-Fi 2 adapter:
Note - The OperationalState of Blank or False indicates that RSC is Disabled.
Disable-NetAdapterRsc -Name "Wi-Fi 2"
Run the following command to verify that RSC is disabled:
The output will change as shown below:
- To disable RSC on all physical adapters, run the following command:
Disable-NetAdapterRsc -name "*"