Unquarantine host can fail when the system has EDR with Pulse Secure VPN

Technical Articles ID: KB94808
Last Modified: 2023-07-03 07:09:48 Etc/GMT

Environment

Endpoint Detection and Response (EDR) - all versions

Problem

When you try to unquarantine a host, you see the following error and the system doesn't come back from the quarantine state:

DXL connector error

Cause

The VPN is dropped, which results in the connection failure.

Solution

Add the VPN-related exclusions under the Network Flow policy.

For Pulse Secure VPN, the exclusions below are needed:

C:\Program Files (x86)\Common Files\Pulse Secure\JamUI\Pulse.exe;
C:\Program Files (x86)\Common Files\Pulse Secure\JUNS\PulseSecureService.exe
C:\Program Files (x86)\Common Files\Pulse Secure\JamUI\pdv.exe
C:\Program Files (x86)\Common Files\Pulse Secure\JamUI\jamCommand.exe

If your environment has a different vendor VPN, add those related processes under the Network Flow exclusion.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Unquarantine host can fail when the system has EDR with Pulse Secure VPN

Environment

Problem

Cause

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Unquarantine host can fail when the system has EDR with Pulse Secure VPN

Environment

Problem

Cause

Solution

Affected Products

Languages:

Choose your region

Title

Title