Reset Search
 

 
Article

KB44631 - After upgrading to macOS 11.0 (Big Sur), end users may receive Error 1205 "Failed to setup virtual adaptor" when Traffic Enforcement or Lock Down Mode are configured

Printable View
« Go Back

Information

 
Last Modified Date11/13/2020 5:22 AM
Synopsis

After upgrading to macOS 11.0 (Big Sur) and above, end users may receive Error 1205 "Failed to setup virtual adaptor" when Traffic Enforcement or Lock Down Mode are configured

This issue may not occur on macOS 10.15.X and below.

Problem or Goal
After upgrading to macOS 11.0 and above, end user may receive the following error message: 
Failed to setup virtual adaptor. (Error: 1205)

In the debuglog.log, the following messages will appear: 
PulseFirewallSysExtClient disconnected due to proxy error handler!
PulseFirewallSysExtClient invalidationHandler!
PulseFirewallSysExtClient disconnected due to invalidation!
Failed to register with the service: Error Domain=NSCocoaErrorDomain Code=4099
PulseFirewallSysExtClient disconnected due to proxy error handler!
Due to deprecation of kernel extension in macOS 11.0 and above, Pulse Desktop 9.1R8.2 and above added support for system extensions which requires explicit approval by end user to properly work.
Cause
The issue occurs due System Extensions are not allowed by default and end user must explicitly approve the Pulse Secure application.  This is as per Apple Design in using System Extensions. If this is not allowed, the virtual adapter will fail when one of the following features are configured:
  • Traffic Enforcement
  • Lock Down Mode
If Traffic Enforcement or Lock Down Mode is not configured by the Pulse Connect Secure administrator, then approval for system extensions is not required.
Solution
To confirm if System Extensions is enabled, perform the following steps:
  1. Open Terminal
  2. Enter systemextensionsctl list
  3. Confirm net.pulsesecure.firewall.systemextenion exists
$ systemextensionsctl list
1 extension(s)
--- com.apple.system_extension.network_extension
enabled	active	teamID	bundleID (version)	name	[state]
	*	3M2L5SNZL8	net.pulsesecure.firewall.systemextension (1.0/1)	PulseSecureFirewallSysExt	[activated waiting for user]
--- com.apple.system_extension.endpoint_security
  1. If the state is "activated waiting for user", then system extensions has not been approved or allowed by the end user.  Proceed to the step below.


Approve or Allow System Extensions with Pulse Secure Application

  1. From Finder menu, search for System Preferences
  2. Navigate to Security & Privacy
User-added image
  1. At the bottom of the Security & Privacy menu, click Allow for the Pulse Secure.app
User-added image
  1. Click Allow for Filter Network Content
User-added image
Related Links
Attachment 1 
Created ByK. Kitajima

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255