Where to look at Pulse Desktop Client storing or caching the route table information?
Ans: The file name called Rmrecovery.dat will be created while the VPN tunnel was formed. After disconnection the RMrecovery.dat file got removed the end user machine.
Below is the location:-
Windows OS:
c:/program files x86>/Common files/Pulse Secure/Tunnel Manager/RMrecovery.dat
Mac OS:
/Library/Application Support/Pulse Secure/Pulse/RMrecovery.dat
Note: This will be helpful in the troubleshooting scenarios, where route entries were added to the wrong gateway/Interrfaces.
Logs Collected:
1) On Windows, go to c:/program files x86>/Common files/Pulse Secure/Tunnel Manager/RMrecovery.dat collect this file. If possible open with notepad++ or textedit and copy the route information to save it and attach to the case.
2) On Mac /Library/Application Support/Pulse Secure/Pulse/RMrecovery.dat collect this file. If possible open with notepad++ or textedit and copy the route information to save it and attach to the case.
3) Pulse Desktop Client Logs
Open > Pulse Secure App > File > Logs > save as
4) Before VPN -open "Command Prompt" > route print output in Windows-10
After VPN - open "Command Prompt" > route print output in Windows-10
5) Before VPN - Launch "Terminal" > netstat -rn output in Mac OS
After VPN - Launch "Terminal" > netstat -rn output in Mac OS
