Fixed Issues

Release 9.1R13.1 PRs

Advanced HTML5 SSH Sessions and do not support scroll bar.

Advanced HTML5 Copy/Paste does not work for SSH.

Suddenly new L3 ESP/SSL VPN connection request fails for users due to auto-generation of Dsagentd cores.

Release 9.1R13 PRs

Client certificate information (serial number and certificate) is not available in PCS user access logs.

Browser based end user UI error message for invalid credentials is not seen.

Warn customers to follow mandatory steps before upgrading PCS/PPS.

PDF files with streams having no Length attribute create segmentation fault causing rewriter server core.

Source IP restriction for IPV6 Subnet in Roles restriction is not working.

Core Access: SSO redirect with concur is not working

XML import fails when config with the connection set containing option "Connect to URL of this server only" is disabled. This is due to improper initialization

Improvements for ICT

PCS archiving is not happening on Azure server

DSDID length is not calculated properly causing Process web crash in FIPS mode.

ICT page is skewed to left in classic UI but OK in new UI

"Bookmarks open in new window" option is not exported in XML Export.

While creating citrix profiles and change the options from java/html5/non-java, the auto policies created are not being handled as expected.

Display a log message when the Root Partition gets into Read/Write Mode

Unable to open Sharepoint documents using MS office native apps.

HTML5: Option needed to hide basic HTML5 bookmarks/RDP launcher

File download fail as file URL is getting truncated where newline exist in file name.

When launching the Citrix client, 60 seconds delay is seen with no UI feedback, before PSAL download link appears.

dsTermServ.exe crashes and unable to access terminal services with Applocker installed.

Import of configs from older software to 9.1R11.4 may generate some error logs along with 'import done' message.

REST API incorrectly responding to queries with ascii symbols

With Recursive DNS domain name resolution for LDAP server is not successful.

Process dswsd crashed during network fluctuation when some of the variable is not set correctly.

Enabling/Disabling ICE license on PSA7000 increases the CPU usage

Pulse One disconnected from PCS after PCS upgrade

Page rendering issue due to Cross-origin Object.

Release 9.1R12.1 PRs

Lost connections and dsagent process restarts due to a malformed IKEv2 packet.

Unable to assign NCIP from the static IP pool in PCS 9.1R12.

Release 9.1R12 PRs

Authentication fails with no authentication prompt even though “Allow Smartcard with Network Level Authentication” shows enabled in the UI. However, XML export shows it as "Disabled".

Due to Password Policy Control Changes introduced in 9.1R5, if we do not receive the proper response from LDAP server the authentication fails and associated process crashes.

Duplicated Named User Licenses as usernames are treated case sensitive.

PCS does not send DSID cookie to Pulse Client (SiteMinder authentication).

The default admin realm is enabled with source IP restriction which restricts the access from a public network..

Event log modification from “info to critical” for SYS30948 and from “critical to major” for SYS30912.

Log ERR32037 “Server name contains unsupported/unsfe characters”, is seen even if the server name is valid and spelling unsafe is corrected in 9.1R12.

Web crashes (restart) due to a problem in JSAM/WSAM data path leading to user disconnection and reconnection.

Multiple Syslog entries are seen under in A/A clusters having more than 2 nodes.

PSA7000 shows improper interface speeds when VLAN is configured.

Multiple monitors, sound does not work when HTML5 is configured with NLA and no SSO set.

Static IP via Radius Attributes not working as expected.

Static IP allocation fails when there are IP pools which overlap with other IP pools.

Windows Terminal Services client disconnects the sessions intermittently.

Windows Terminal Services client disconnects when copying the files.

Importing certificates from system config fails when there is no password set during config export.

Azure PCS instance goes unresponsive intermittently.

Added an event log to monitor internal shard usage.

VIP status change notification event sent by passive node on reboot is treated as VIP status change notification from Active node, and users notice VPN reconnection.

Session extension using PDC through SAML authentication server does not work.

Changes to entity ID and SAML auth server instances are not recorded in the admin access log.

Windows Pulse Client 9.1r11 with Avaya One-X causes BSOD.

when User role is duplicated, VPN tunneling option is reset to default options and not updated.

Impexserver crash is observed when importing PCS is having a duplicate certificate.

Yearly graph shows incorrect data for active user sessions.

After upgrade to 9.1R11, IP Assignments through LDAP/Radius Attributes is failing but Static Pool works fine.

PSA7000f server restarts unexpectedly and user connection fails. Additional logs added to determine the Root Cause.

Static IP allocation issue when multi session is enabled.

Citrix VDI not working in the first attempt, Second attempt starts working and CTS launches and connects.

Only ntpd Client service runs going further (Previously both server and client services were run).

Failed to upload configuration on the newly registered PSA device on pulse one.

Redirected URLS encoded not passing properly.

When creating an admin role, User roles in the Users delegation displays incorrect number of selected roles.

Bandwidth management policy does not work in the SSL Mode.

guacd process protection mechanism where each instance of guacd instance is monitored and killed if the instance takes 100% CPU till the grace time.

Healthcheck.cgi does not work from F5 load balancer.

Named User Record/Database do not show up on license client.

VLAN details are not removed from VLAN page after removing VLAN ID from management port.

PCS device does not send the SNMPv3 trap out from the device.

Expired certificates alarms for deleted certificates.

Web process failures due to DSEvntTimer observed on PCS.

Limitation on number of realms in sign in URL while connecting through PDC client.

Compliance report for hostchecker policies mapped against realm/role is generated for user that does not belongs to that realm/role.

License server low-level protocol error,Code=[6]: Could not resolve host name through external port.

XML export of Admin/User realms shows the directory-server attribute same as authentication-server even though there is None in the UI.

With Pre Host checker configured, if the Pulse credentials prompt times out, the session is extended instead of resumption.

Basic HTML5 : Users not able to use mouse emulation with guacamole RDP sessions on iOS13 iPad.

Extra fields appear under Role > Web Bookmark for new or existing bookmark prior to upgrade.

User record synchronisation feature may not occur as-expected across all configured devices.

User Record Sync clients disconnecting from green to grey status.

Host Checker Re-Triggers with error message 'ESAP upgrade is needed or Patch Management policy configured' in event logs.

SAML Single logout is failing.

MSSP: watermark does not get reset, even if license client is not leasing licenses from the license server.

AAA: X-forward-for IP is not evaluated/used when using geoLocationCountry rules.

One cluster node stops accepting new VPN connections post getting deactivate/activated in cluster.

Number of MC groups has been increased to 40 & 36 on Linux and Windows respectively.

Upgrade fails when data partition does not have enough space to hold system configurations.

Users unable to join hosted pulse collaboration meeting session through IE 11 browser.

Upgrade failing for one node In A/P cluster.

User gets disconnected when cert restriction policy is configured and SAML authentication server is used. This has been fixed as part of this PRS.

Incorrect Source IP address used when sending packets to secondary radius server (When using “Traffic Decoupling” at “Auth Server Level”).

Pulse Collaboration: Customer gets an error while scheduling the meeting if the localization set to French.

SNMP alerts shows abnormal increase in device temperature.

Manual failover takes time to resume user tunnel connections. This is now improved.

Terminal Session stops working after upgrade to 9.1R8. Adding logs to improve debug ability.

Failed to send API requests from PCS(MDM) to Microsoft Intune for device authorization.

Openstack KVM deployment - after reboot only local subnet can connect, PCS ignoring other packets.

Fed-Wide session sync delay between Replicas results in user session getting removed from Imported sessions within few minutes.

Incorrect Interface Status sent by the PCS appliance while performing SNMP Walk after upgrade to 9.1R1.

Release 9.1R11.5 PRs

Pulse Upgrade Helper tool upgrades Pulse Desktop Client once and terminates IE processes during the process.

State Storage full and Program cache-server failed.

Unable to see the details of package uploaded into Staging Area in Admin UI

Improper titles for lines on HTML5 dashboard graph and some titles missing in Concurrent users graph.

PSAL fails to launch Java Applets.

In versions 9.1R11.4 and below, if the 'HTTP only cookie' option is enabled for admin role, the super admin session will not work.

Program web recently failed on 9.1R11.3

Users are not prompted to enter credentials as well as MFA on successful connection to VPN.

The localization support is not available for new options on user created advanced HTML5 bookmarks.

Host header Validation is failing for Virtual hostnames.

PSA 5000 crashes with no access to UI or Console.

GARP frames are not being sent under Default VLAN configured on an interface - VIP IP is not accessible after manual failover in A/P cluster.

Release 9.1R11.4 PRs

Web crash due to empty session IDs.

Warm restart of services is observed on two node PSA7K AA cluster when run continuously for multiple days causing L3 and L4 connection drops.

Error code 1326 displays on Pulse Client when username/password is saved on Client and expired on AD server.

Custom expression failure messages is flooding User Access Logs.

Release 9.1R11.3 PRs

Code signing certificate fails globally when launching HC using browser. The certificate issue is addressed. For information refer KB44781.

Release 9.1R11 PRs

During Kernel Panic (System stalls with no access to Admin UI), PCS/PPS devices will automatically reboot by default.

Process snapshot gets generated for dsagentd/Web processes in 9.1R10. This issue can happen rarely when Client closes PSAM session with PCS server immediately just after closing TCP application connection.

Dsagentd crashes when PCS System load average goes high.

Rename all the places that contain WSAM keyword on the Admin UI to PSAM.

Kernel panic is observed sometimes and PCS restarts.

Host Check fails on macOS 11.1 when the policy is enforced.

For more information, refer KB44663.

Background image and recaptcha is not loading through rewriter.

Supporting corner cases for jquery usage in client side rewriter handling.

WTS: End users unable to enable MIC on the user interface.

PDC: Virtual adapter stops intercepting IPv6 packets on Mac/Windows/Linux platforms using PDC 9.1R9 build in ESP mix mode.

Host Checker fails after upgrading ESAP version to 3.7.1 or 3.7.2 or 3.7.4 from any previous ESAP version on macOS endpoints (KB44643).

Fixed rewriting for other elements of div tag caused due to Data-srcset support.

User is not able to configure Azure as backup server in China region.

Login button is not enabled when accessing web rewriter through IE browser.

NTP will not synchronize time when default VLAN ID is configured on the interface.

Browser-based Host checker fails to get launched in 64 Bit Internet Explorer.

Kernel panic “nf_udp_esp6” may be observed on PSA7000F.

Rename all the places that contain WSAM keyword on the Admin UI to PSAM.

Pulse Component Set is selected to NONE does not update the “connstore” in spite of changing the connection set. A warning message is displayed to guide configuring the “Connection Set”.

Disabled DMI Inbound connections setting is not retained after reboot.

SNMP query for “sysObjectID” is returning PSA7000F for PSA7000C platform.

Handling rewriting of Data URLs at server side code to avoid rewriter crashes.

Pulse One disconnected from PCS after PCS upgrade.

Aligned the latest MaxMind DB pointer with local DB for Ueba package upgrade.

Spikes are observed at regular intervals in the concurrent SSL connections graph.

Release 9.1R10 PRs

License client reports the excess allowed usage while sending the usage to server.

This issue is fixed to limit the reported count to maximum lease limit.

“Error updating data for chart hc_failure_reason/auth_mechanism” log on PCS is not seen.

The Exception that was causing this error is fixed.

Administrator can set a guaranteed minimum users on a realm to allow an user from that realm to log into the PCS/PPS when the licensed concurrent user limit is reached.

From Release 9.1R10, guaranteed minimum users is applicable when no ICE license is installed or ICE license is installed and enabled.

When the current MSP license expires, and customers installs a new MSP license, VLS needs to re-register with PCLS. This was not happening previously, and this resulted in billing against older authcode.

In 9.1R10, we have fixed this issue, so that VLS re-registers with the next active MSP license. Hence, the license usage is reported against the new authcode.

Certificate authentication fails when the option 'Trusted for Client Authentication' is disabled in client CA certificate hierarchy.

Added a new user access log and an Admin UI note to alert the PCS administrator in such cases.

Analytics Device OS graph does not show Windows 10 OS information.

This issue is fixed in 9.1R10 onwards.

Unable to publish config when trusted client CA cert (using CRL) is deleted on Master appliance.

This issue is fixed in 9.1R10 onwards.

Predefined Host Checker policy can now be configured with a ignore category based on the vendor.

End-Points connected through slow internet now will not hit the incomplete ESAP package download scenario.

Access to advanced HTML5 custom URL is not successful without user logging into PCS server.

The user is now prompted to log into PCS followed by log in prompt to target machine.

Release 9.1R9.1 PRs

Web process restarts when Client Application profiles are configured under
SAM --> Resource Profiles.

For advanced HTML5 sessions, web process restarts if the FQDN is not resolved.

For advanced HTML5 sessions, login may fail if the target machine username or password contain special characters.

Release 9.1R9 PRs

“Failed file system integrity check” warning appears on Admin UI when the file “integrity_check” is either not created or deleted. This is addressed in 9.1R9.

DHCP Set option is added for AWS (If no DNS server configured in DHCP option set, it will take the second IP address as primary DNS server from the internal port subnet).

Agent Type in active users page on PCS fails to show Windows OS version with 9.1R8 PDC builds.

XML export shows virtual Platform for physical license clients. This is addressed in 9.1R9 release.

Rewriter client side parser issue fixed for DanaGetURLUnencoded API.

Performance tuning is incorporated for FQDN ACL feature.

Pulse Client version does not display under "Active Users" tab for mobile devices. The issue is addressed in 9.1R9.

Pulse Collaboration stops working after Setup Client download fails, after upgrading it to PCS 9.1R8.

Dssecidcheck program fails. This is addressed in 9.1R9.

If a session is no longer present in the system when the IP lease period is active, then the IP address is released back to the DHCP server.

Host Checker: Compliance check fails when using Sophos Cloud Endpoint 2.8.6.

SNMP polling on ifHighSpeed does not return the correct speed of a network interface, if default VLAN is enabled for that interface. This is resolved in 9.1R9.

File Share: When a big file is uncompressed, PCS will ensure that all the chunks are read properly from 9.1R9.

On the "Virtual Port" view page, if admin clicks "Cancel" button without saving any changes, then Network service is restarted. This is addressed in 9.1R9.

From 9.1R9, if PCS VA is hosted by VMware, then NTP setting at "Date and Time" page will have an extra note which informs admin that the Virtual appliance should have only one source of Time Sync (VMware ESXi or NTP Server, NOT both).

Web Process crash due to timer Library corruption is addressed in 9.1R9.

PCS was unable to handle "Unknown" OCSP Response. This is addressed in 9.1R9.

Sometimes, TCP Dump does not start. This is addressed in 9.1R9.

Logical volume support is removed from KVM instances.

Custom start page takes about a minute to show up when connected from IE with split tunnel and VPN auto-launch enabled. This is addressed in 9.1R9.

The default password length has been increased and the same has been updated in the Azure ARM Template.

In spite of installing the Meeting license on a virtual appliance running A/A cluster, the effective count of concurrent meeting users remain zero. This is addressed in 9.1R9.

PSAL Linux is unable to connect to PCS. This is addressed in 9.1R9.

During domain controller reachability test under LDAP Auth Server, PCS does not close the LDAP TCP socket connection with domain controller. This is addressed in 9.1R9.

When SAML config has both SLS and SSO service types using same Location URL, Import XML fails causing SAML metadata publish to go into loop. This is addressed in 9.1R9.

PCS appliance now sends IPv6 Neighbor Advertisement with correct VLAN tag for user roles mapped with sourceIP as VLAN interface.

dsagentd process crashes when handling multicast traffic. This is addressed in 9.1R9.

Session extension fails when custom sign-in page is configured for the sign-in policy. This is addressed in 9.1R9.

When default VLAN is enabled, virtual port is not considered for the user role while calculating the source IP. So, default IP was assigned as source IP. This is addressed in 9.1R9.

Release 9.1R8.2 PRs

A tactical fix was provided as part of 9.1R8.1 (PRS-393243). However, Custom Rule Expression evaluation is now made more robust with thread safety in 9.1R8.2.

PCS can parse and store up to 32 IP addresses returned by DNS server.

Running TCP Dumps can get the Disk Full as there is no Log Rotation in place. This is addressed in 9.1R8.2.

Application level integrity check was missing on PCS for Fragmented EAP-TLS packets. This is addressed in 9.1R8.2.

Host Checker fails with Error "Host checker did not get installed properly. Your computer does not meet requirements". This is addressed in 9.1R8.2.

The desktop settings configured under terminal services bookmarks will not apply if the resource's Operating System is Windows 8 or later. This issue is seen in Pulse Client 9.1R8.1 or earlier. The issue is resolved after implementing new interfaces of the Microsoft MsTscAx component.

Modified WebRequest code to prevent null pointer (Hprewrite-server) crashes.

DHCP options disappear upon clicking “Refresh Now” button under Connection Profiles > Proxy Server Settings. This is addressed in 9.1R8.2.

Duplicate syslog (SYS31407) messages appear in event logs. This is addressed in 9.1R8.2.

Large Username XML Import now logs proper error message.

Upgrade failure due to white spaces in the configuration is fixed in 9.1R8.2.

Release 9.1R8.1 PRs

Time drift is observed when NTP is configured on Virtual Appliances. This can affect authentication, cluster sync, and cause licensing issues. This is addressed in 9.1R8.1 (KB44558).

Host Checker policy evaluation fails very intermittently for some time if policy rules need to be evaluated based on Custom Rule expression. This is addressed in 9.1R8.1.

dsagentd crashes occasionally in load condition during initial data channel establishment. This is addressed in 9.1R8.1.

The Overview/cockpit graphs representation will now show data similar to the Classic UI (It will omit the duration for which the data is not available).

Restriction of REST API commands via the internal port is now fixed.

SNMP polling was not returning false PCS Model Number and device type. This is addressed in 9.1R8.1.

Session Server failures due to cluster instability is fixed in 9.1R8.1.

Winbindd crash seen due to an exception is fixed in 9.1R8.1.

SSH/Netconf clients should now be able to connect PCS DMI Agent successfully.

Quick navigation link added to Enable/Disable FQDN ACL. And the following warning message is also added:

“Ensure that there is no DNS latency/delay in the network to avoid performance issues”.

When a license client surrenders a license, the expiry date of that surrendered license keeps changing in license server to keep the expiry date always as 10 days (default) ahead of current date. The change is reflected in “License Summary” page of license server admin UI. But the change is not always reflected correctly at the “Pool of available licenses” section under the “Configure Clients” tab as there is a sync-up issue. This is addressed in 9.1R8.1.

When Pulse Desktop client is used, PCS server does not provide session ID in User Access log after a successful login. Here “session ID” denotes the last 8 characters of actual session ID in server, and it is used to differentiate a session from other sessions for one user. From 9.1R8.1, PCS server will provide this ID for all types of Pulse clients after successful logins.

From 9.1R8.1, PCS end user name will appear as client name (instead of Localhost) in HTML5 RDP session.

From 9.1R8.1, a warning message will be sent only when the lease request fails or no leasable license is left with the number of users reaching towards maximum concurrent users limit.

Frequent warning message about “number of concurrent users is nearing system limit” creates confusion about actual issue with concurrent users limit. Form 9.1R8.1, a warning message will be sent only when lease request fails or no leasable license is left and number of users are reaching towards maximum concurrent users.

Global session configuration values (Users > User Roles > Default Options) are used when individual user role is not configured with session options.

Release 9.1R8 PRs

Additional logging to debug web crashes.

Active users were not able to sync to the newly added node on a 3 node Active/Active cluster. This is addressed in 9.1R8.

User sessions are not synced across the nodes in an Active/Passive cluster. This is addressed in 9.1R8.

Invalid packet processing in kernel is addressed in 9.1R8.

Intermittent audio disconnect issue with HTML5 RDP session is addressed in 9.1R8.

tncs process crash with Host Checker caching enabled is addressed in 9.1R8.

The dsunitysamlhandler process crash is addressed in 9.1R8.

In 9.1R4 to 9.1R7, when multi monitor option is selected under the Terminal Services session/bookmark page as well as under Terminal Services Options page, XML config data shows incorrect value. This is addressed in 9.1R8.

Kernel panic during upgrade on PSA5000-V running 9.1R3 on Hyper-V. This is addressed in 9.1R8.

Log rollover is implemented for postgresd so that it does not cause the Disk to get full.

SAML authentication is now successful when signing is enabled for SAML requests/responses using certificates.

As dshealthstatsunity process was getting exited due to exceeding process size, data was not being sent to Pulse One for that particular interval and thus calculated cumulative count at Pulse One was incorrect. This issue is addressed in 9.1R8.

Kernel logging options are added by default for better debuggability.

As process was getting exited due to exceeding process size, data was not being sent to Pulse One for that particular interval. This issue is addressed in 9.1R8.

For config elements with unicode characters and having length exceeding 4096 bytes, the config import fails on Pulse One client. This issue is addressed in 9.1R8.

Tunnels get dropped during connection resumption due to a server error. This is addressed in 9.1R8.

The TCPDump filter expression can now contain characters from the set "<>|;()[]?#$^&*=\'`"" .

Kernel Panic hrtimer_interrupt issue is fixed.

Multiple VIP fail over was seen on Virtual A/P cluster due to the time drift between system clock and hardware clock. This is addressed in 9.1R7 (KB44457).

The dsagentd process crash during assignment of IP address from DHCP server is addressed in 9.1R8.

With current OPSWAT library code, the verification of update functionality was not working. OPSWAT has fixed the issue and provided a new library.

The top-roles section displayed on dashboard was not showing the roles name in Japanese and other languages. This issue is fixed for both Classic UI and New UI in 9.1R8.

Whenever a user tries to access the VDI resource, a wrong error code for timeout was written in the logfile. The user sees the message "Missing host name/IP, Invalid host name/IP: "

To address the issue:

1. Timeout error ID is passed to write in logfile.

2. A proper validation has been done for the wrong false alarm.

Bandwidth Management policy not getting enforced for VPN tunneling users is fixed in 9.1R8 - https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44402/?kA13Z000000L3Dc.

PCS was returning "Incorrect ICE action" error message when trying to execute api/v1license/ice REST API to fetch the current status of ICE. This is addressed in 9.1R8.

Release 9.1R7 PRs

Application access using Citrix Terminal Services through IE browser fails in 9.1R5-9.1R6 PCS versions. This is addressed in 9.1R7.

Host Checker support for OS version check is added for iOS versions 13.4 and 13.4.1.

PCS syslog forwarder does not work if connection to syslog server fails during startup of the syslog forwarder process. This is addressed in 9.1R7.

Enterprise user onboarding fails in Mac OS Catalina as the filename extension was not populated as '.mobileconfig'. This extension is added in 9.1R7.

Noticeable slowness was seen in several applications including Citrix HTML5 video rendering in 9.1R3-9.1R6 PCS versions. This is addressed in 9.1R7.

SNMP functionality was not working after cache sync. This is addressed in 9.1R7.

User access log now shows real-time active HTML5 sessions count.

In PCS A/P cluster split and joined scenario, lease license IDs are validated to reset the stale ID and license client will be able to lease licenses successfully.

Cloud Platforms: Improved SNAT performance by tuning kernel module parameters based on the memory available in the device.

With PCS 9.0R2-9.1R6 and Pulse 9.0R2-9.1R3, the client continues to send the CAV traffic to PCS every 300 seconds even when Cloud Secure license is not installed. From PCS 9.1R7 onwards, the PDC client (Pulse 9.0R2-9.1R3) will contact the PCS server only once per user session - KB44410.

From PCS 9.1R7, the "Synchronization of last access time in user sessions" option in A/A Cluster mode will be auto-enabled and grayed out when the "Synchronize user sessions" option is enabled (otherwise, it can affect session migration). Existing cluster configuration is not modified during upgrade, so we recommend admins to enable this option for existing configurations as well.

If epupdate_hist.xml is hosted internally with no authentication and if "Use Proxy Server" (With/without auth) is enabled with FQDN or IP Address, the first 3 characters are ignored thus causing it to fail. For example, proxy.domain.net is taken as xy.domain.net. This issue is now fixed for both PCS and PPS.

Client's original Source IP was not logged if Load Balancer is used. Client's Source IP is now retrieved from 'X-Forwarded-For' header and logged in user access logs.

Release 9.1R6 PRs

Java Script is displayed after the user scans the QR code only during the TOTP user registration.

Hostname resolution for an FQDN with up to 255 characters was not supported through the L3 tunnel in PCS 9.1R5.

Admin cannot download reports in PDF format for PCS.

HTML5 connections cause memory leak in Guacamole server and result in high memory usage and swap memory usage

CPU Allocation issue on PSA-7000 (all flavors/varieties) appliances in case of Single-Arm mode VA deployments is now resolved on PSA-7000 HW and ESXi (VMWare) solutions.

Refer KB44446 for more details.

Process snapshot for "dsserver-tasks" is generated while deleting meeting objects for corresponding users.

Some of the examples listed under "Split Tunneling Networks" policies are not supported.

External backend resource access using HTTP GET request with username in the URL for the file login.cgi fails through Rewriter.

Web server crashes and results in User disconnections due to webSocket upgrade related messages during Auth Only URL access.

User Accounts under TOTP Auth server Users section cannot be exported.

Delayed or no response from PCS for SNMP queries under load condition.

The corruption of blob during the epupdate results in Host Checker scan failure for users until the next successful epupdate.

Web process snapshot is generated while sending POST request by REST API with an empty body.

Garbled text in Citrix VDI profiles page when accessed using bookmark with the Japanese language.

The dsagentd process (client server process) crashes and frequently disconnects in 9.1R4 when there are more than 1024 tunnels including MobIKE IKEv2 tunnels.

After upgrading PCS/PPS to 9.1R3-9.1R5, slow Host Checker response is observed due to a very frequent re-evaluation of Cybereason Active Probe product.

Garbled text in file share page when accessed using bookmark with the Japanese language.

During system downtime activities such as an upgrade, Event IDs such as 20412/20413 are missing in the Syslog server.

Release 9.1R5 PRs

9.1R4.3 Radius crashing, unable to authenticate Pulse.

Intermittently, the system throughput falls drastically and user connections fail.

“500 Internal Error” is displayed when opening Authentication related pages.

Intuitive Customer friendly ways and relevant logs to avoid customers configuring single core.

Idle timeout session is not working, OWA 2016 keepalives not ignored through web-rewrite.

License Surrendering not happening due to the heartbeat not sent.

Host Checker :: OS Checks :: MAC :: Add support to configure Minimum Service Pack/Version for MAC Catalina(10.15).

PSA7000 at 30% total CPU due to two guacd processes at 100% CPU, planning pandemic and wanted to know root cause.

One node in Cluster is surrendering the licenses to the License server. However, the increment of the surrendered time is not happening.

PSA5000 : 9.1R4 : A/P Cluster : REST API calls are failing intermittently when they are executed in a loop continuously.

Text corrected under Log/Monitoring > Admin Access > Settings.

PCS 9.1R4 incorrectly reporting duplicate machine ID.

Unable to upload config to Pulse One: Configuration changed while preparing configuration to upload.

After upgrade VA-DTE & PSA-V to 9.1R4, nfqueue unable to create IPTables when VM is configured with 1 CPU core only.

FileShare:: Customer unable to download direct file from FileShare on 9.1R4 PCS version.

Rewrite: Web page of the maps web applications fails to load via rewrite.

Registered PCS Appliance failing with Pulse one communication after importing user config and shows registration expired error message.

"Sign Out message" does not properly display unicode text (Japanese, Korean, Chinese, etc.) with Sign-In Pages via browser.

Unable to authenticate user using certificate. Reason: Wrong Certificate::unsupported name constraint type.

System: Built-in Trusted Server CAs cannot be removed if they have subCAs.

PSAM sending unintended traffic via tunnel to VPN in 9.1R3.

User Sessions get disconnected after upgrading to 9.1R3HF1.

Program dsdashsummary failing continuously on PCS running on 9.0R4.1.

Sharepoint 2019 is not loading properly through web-rewrite.

VDI Bookmark would not establish connection to the VDI resource without host entry on the client machine.

XML Import of trusted server CAs generates a spurious admin log message for each unchanged CA.

System: Device does not boot up when upgrading from 8.3R7.1 to 9.0R5 with option DELETES all system and user configuration data before installing the service package is selected.

System : Licensing : "License server low-level protocol error, server=, Code = [6] :Could not resolve host name" populated in event logs of license server.

After upgrading to iOS 13, HTML5 Access users seems to have broken the on-screen mouse pointer.

AAA::Issues with host checker when user logs in to a different realm with TOTP auth server enabled.

Pulse One 2.0.1902: Certificate > Trusted Server CA changes not being distributed (deleted expired CA).

VIP became unreachable from enforcer when upgrading from 5.4R7 to 9.1R2.

Rewrite: Dynamic365 menu tabs do not render when on 9.1R1.

User access log indicates Login failed using auth server LDAP Server (Failed::unable to verify the first certificate) for wrong password.

"Program fqdnacl recently failed" event failure on PCS 9.0R4.

Reboot failed on PSA7000f.

Gliffy Plugin in Confluence does not work via Web Rewrite.

IPV4 Settings change in External or Internal port keeping Default VLAN ID same does not reflect under VLAN tab..

SNMP: ifAdEntAddr mapped to wrong ifAdEntIndex values.

Release 9.1R4.3 PRs

“500 Internal Error” is displayed when opening Authentication related pages.

Release 9.1R4.2 PRs

User Access log indicates “Login failed using Auth. server LDAP server (Failed: unable to verify the first certificate)” for wrong password.

Registered PCS Appliance fails with Pulse One communication after importing user config and shows “Registration Expired” error message.

Release 9.1R4.1 PRs

PDC throws Authentication rejected by server [Error : 1319] when using global PCS url.

PSAM sending unintended traffic via tunnel to VPN in 9.1R3.

Release 9.1R4 PRs

SNMP: ifAdEntAddr mapped to wrong ifAdEntIndex values.

Device locked up and dropped all connections due to Web process consuming CPU.

VLS does not throw any error if there is no response for Heartbeats sent to PCLS.

EasyPrint feature using the Premier Java RDP Applet not working.

Program dsagentd failed.

PCS not sending any Syslog traffic to configured Syslog servers.

Active Sync stopped working after upgrading the device to 9.0R4.

Cluster communication and state storage problems on A/A cluster.

Program dsagentd recently failed after upgrading PCS from 9.0R3.2 to 9.0R4.

PCS-VA sending critical SNMP alerts while leasing license.

DFS: process snapshot generated by snmptrap process.

Program dsagentd recently failed while running Mixed [V4 and V6] 60K VPN Tunneling ACL's throughput test on PSA5k for secure cache build-3164.

Multiple users getting disconnected from Pulse Client.

Sharing Feature is not working in macOS Catalina.

Sometimes empty logs are seen under "Log/Monitoring".

9.0R4 and 9.0R5 SPE (PSA-V) do not show the User Record Sync column in Admin UI > Auth Server page.

Host Checker checking for virus definition file based on Number of updates fails for Sophos Endpoint Security and Control 10.8.4.

After Upgrade from 8.3R7.1 to 9.1R1, error encountered while upgrading cache (in Host Checker).

[FQDN ACL / NFQUEUE] Request DEV help in determining why thousand of VPN Tunnels dropped traffic within.

Facing slowness when accessing web application through Authorization-only access post upgrading to PCS OS 9.0R5.

Group Names in the role mapping rule will get added with &, # and; special character if more than 5 groups are selected with AD as the auth server.

The cookie setting should be included in the resource profile.

UI: Description incorrect on default deny in 9.1R3 initial deployment.

Button to dismiss the banner on PPS/PCS Dashboard for not accepting Perpetual license is not working.

Need to replace VA-SPE|PSA-V in "Only EVAL licenses are allowed for manual installation in VA-SPE|PSA-V".

Proper logging for NFQUEUE full and drops needed, also consider this situation for cluster A/P failover or add to healthcheck.

Unable to ping the IPv6 VLAN-Gateway from the PCS device after changing the Gateway address.

User dropped from the VPN tunnel connection ##g_dhcp_proxy_wbuf is maxed!.

Unknown RAID status in PSA7000f due to no space left on device.

Active node went unresponsive in A/P cluster and generated multiple Watchdog snapshots.

“Invalid EKU text” error found while configuring "E-mail protection" under EKU text.

Host checker: After upgrading to 9.1R3, HC "Successfully loaded" message is garbled when it is initiated in browser with Japanese language.

healthcheck.api showing incorrect MAXIMUM-LICENSED-USER-COUNT in AA cluster.

Web Rewrite: Images not loading on the web page for a web resource configured via rewrite.

Access via SSH port forwarding fails.

Home page of eTime (Timesheet) Web application is not rendering properly via Rewrite in all web browsers.

Add iOS check for 13.2, 13.2.1, 13.2.2.

Adding default policy for Citrix resources.

VLS should use only MSP Authcode for registering with PCLS.

Add iOS Check for 13.2.3.

Users cannot see full display of shared screen, if the size of text, app and other items in the "Scale & layout" in Display settings is set to 150% (Recommended) on the client's machine.

Unable to restore Local User Accounts Backup on PCS 9.0R5.

DanaLoc appears to be missing when using IE11.

Web Rewrite: Drop-down menu, Refresh button, Change Password option and Login button not working on the login page.

Release 9.1R3 PRs

System| Temperature status value on SNMP server displaying wrong value.

Citrix sessions drop regularly causing various issues. These issues are observed in PCS 9.0 with Citrix port 2598 via JSAM. This issue is not found in 8.2R8.

Users unable to login as well as dropping users - LMDB full.

Realm level certificate restriction skipped with SAML Auth.

Host checker is failing for Host Checker (OS-Check only) for Chrome OS 71.0.3578.127 with PCS 9.0R1 firmware version.

Dropdown option misses internal menu while accessing via web rewrite.

VDI Session are not showing under Virtual Desktop Sessions.

UNC path is not handled properly by HOB Applet.

PCS deployed on the AWS Cloud showing speed 10 Mbps.

Last core dumps being generated at customer after 9.0R2.1HF6 with fixes.

Syslog missing event logging info when upgrading.

PSA7000f RAID failed after upgrading.

Login page is not rendering properly for a web resource configured through rewrite.

PCS using DUO as secondary authentication fails the first authentication attempt after installation.

CORE.fqdnacl crashes continues to occur even after 9.0R2.1HF6 (with fix).

None of the contents in the Azure web portal are loading through rewrite.

Unable to load a sign-in page getting stuck in loading the web page while accessing a web resource configured through the rewrite.

PCS evaluation of the custom expression "time.dayOfYear" is not working as expected.

Factory-reset does not work in 9.1R1 instead it boot up PCS with current image.

Logon page of SAP fiori portal displayed as blank in IE11 only via rewrite.

Mails are not getting synced in Native Email Client in iOS when using SA as ActiveSync Proxy due to stale records present and crash is happening in aseproxy-server service.

When extending Pulse Client sessions, it causes network drop.

JSAM stuck on loading forever on IE - Java.

HOB stuck on loading forever on IE - Java.

Azure 9.0R3.1 - postgresd service restarts constantly after deployment.

Host checker fails to detect FireEye Endpoint Agent 29.7.0.

Running Add command when the Disk is missing will cause a minor error message which requires a reboot.

Dns_cache process snapshots persist after upgrading to 9.0R4HF6.

Unable to view PDF files in the myDocuments application.

File Share accessing issue in 9.0R4.

HTML-5 -RDP requires additional authentication.

After upgrading to 9.1R1, host checker word is garbled when it is initiated in browser with Japanese language.

PSA7000f reports HDDs missing and inactive after upgrade to 9.1R1.

After upgrading to 9.1R1, the name of the user role displayed in submenu is broken if the language is in Korean.

When accessing the resources via bookmark, contents are not displayed correctly.

Failed filesystem integrity check message seen on PSA5K console after upgrading from 9.1R1 to 9.1R2-2119.

Periodic Snapshot settings via REST fails with error "Modification of Attribute not Allowed".

When the admin clicks on 'Agent', they receive an error "the page you requested could not be found".

Pulse One 2.0.1901: With PCS 9.0R5 (EA) having failure in target importing SAML using Artifact - empty "Source Artifact Resolution Service URL".

Chat option not working on the Medical application.

Syslog - If an appliance is rebooted, it cannot successfully reconnect to a P1 syslog server.

Critical Events do not get displayed in System > Overview Page.

REST API calls failing for RDWeb Profiles in PCS.

When syslog server's FQDN resolves to two IP addresses, one of which is reachable, PCS/PPS may fail to connect.

Delay during session failover of PCS in Active/Active cluster in AWS.

Japanese words are garbled when we click on the File share bookmark.

DMI get-config of RDWeb resource profile returns badly formed XML.

Release 9.1R2 PRs

FQDNST denied IP is going via tunnel.

Clear config on PSA 300 fails with unable to mount /webserver partition.

Post failover, session resumption delayed with Pulse Client.

Clear config on PSA 300 fails with unable to mount /webserver partition.

Radius OTP as Secondary authentication fails for the Pulse Client.

HOB failed to launch through Java in IE.

JSAM launch failing for IE -JAVA.

Factory reset from VMware VA console does not load the factory reset version and loads the current version.

VMWare View 5.1 client does not connect after upgrade.

Premier Java Applet for Terminal Service failed to download .jar file.

Publishing for certain block types causes many log messages and other side effects.

Release 9.1R1 PRs

Remove legacy mode from Active Directory auth. server.

JSAM Stats value (Bytes count) is not getting displayed in IE - Activex.

DNS resolution not working for alternate VPN connections.

The definition update is not listed for Sentinelone product in "epupdate_hist.xml" file.

Unable to add the resource <userAttr.Framed-Route> in IPV4 address under Split tunneling policy for PCS version 9.0Rx.

Rewrite: PSAL launching Citrix app multiple times in an infinite loop on all the browsers.

Contents of a web response are not getting compressed as content encoding header is missing in the response from PCS.

Host Checker IMC detects the Antivirus Change in the client PC and report it to IMV even when Perform Check every min is set to 0.

Split tunneling FQDN policy with special character, fails to save.

Unable to edit word documents hosted on SharePoint 2013 via PTP using MS Edge.

Resource access dropped (RDP, SSH etc.) intermittently on SAW environment.

Core Access: E-mail web page getting stuck on "login processing".

Core Access:Web page shows horizontal scrollbars at the bottom of screen.

DanaLoc fails in case of old window object reference from a new window object.

PSAM:Pulse SAM takes at least 40 seconds to open custom start up page in UI Options compared to WSAM.

AAA/Security/Pulse: SAML AuthnRequest leaks data across users with "Reuse NC/Pulse session" enabled.

User getting same IP address assigned from IP pool in few hours.

Pulse browser Toolbar is flickering when accessing OWA 2016 resource on iOS device through webrewrite.

PSA 7000f Frequently reports one of the power supplies is back up.

Unable to save Citrix listed application using Hostname with port number.

HC: Compliance fails using Pulse Desktop client 9.0.2 build 1151.

Users with username in UPN format in System Local Authserver are unable to log in using TOTP after upgrading to 9.0R3.

Killed user session admin log "ADM23534" does not display admin user but the actual user being terminated.

PCS device is unable to get the enrolled mobile device attribute from MDM server.

Setting the hash property of location object causes problem in IE, Edge and Firefox browsers because the URL is appended with fragment identifier. In chrome and Safari browsers things work fine.

Post upgrade to PCS 9.0R3, "License server low-level protocol error Code = [47]" error is triggered on license client.

Page does not load via IE browser.

"Auto populate domain information" behavior when unchecked: blank first then if wrong password, auto populates domain.

HTML5 RDP logging do not show realm and shows ().

Add iOS Check 12.1.1.

Menu is not loading when accessing the application through web-rewrite.

PCS 9.0 VA-DTE :: Nodes in cluster gets disabled automatically.

Multicast Traffic not working intermittently in the VPN Tunnel in 8.3R6 / 5.3R6 version and after restarting services, works fine for all users.

Wrong information in the log messages for Authorization Only Access when source ip restriction is configured on role.

Add support for adding parameters “client-name’ for HTML5 Access.

LDAP authorization does not work when using ikev2 tunnel (handle 10K tunnels+few hundred ikev2 clients).

Read-only admin sessions see an option as disabled that is actually enabled on user roles.

Page displayed while PSAL downloads to a Mac client shows instruction for Mac; but then references Windows System Tray.

Logs are not fully displayed if select the date as filter.

File browsing SSO is not working with user details are given in variable form as well when configured to use system credentials.

When a configuration object is renamed, not all of the resulting configuration changes are uploaded to Pulse One.

Web process crashes and logs "ERR31093: Program web recently failed." in the event logs.

Core Access: Unable to import or download the image using PTP.

DMI agent not responding to netconf commands as expected.

System| Active/Passive cluster responding to ICMP request even after shutdown.

Randomly users are not able to access IPv6 resources through VPN device via VPN tunneling.

PSA7000f interface status in Network Settings not working.

System| Temperature status value on SNMP server displaying wrong value.

Citrix sessions drop regularly causing various issues. These issues are observed in PCS 9.0 with Citrix port 2598 via JSAM. This issue is not found in 8.2R8.