This article describes a scenario where MAC-OS users using Pulse Secure Desktop client 5.1Rx for Remote Access VPN to an SRX device were unable to download large files from the file server over VPN Connection.

After getting connected to SRX devices over the Remote Access VPN, Pulse Secure Desktop client for MAC-OS users was unable to download large files from the file server. During downloading of the file, the download stops in between and traffic stops from the pulse client to SRX.

The cause of this issue is identified to be with Re-keying of Phase 2 IPsec Security Association. The parameter is " ipsec_rekeyKOctet" lifetime kilobytes, and the value for which is hard coded in Pulse Client. Re-key is supposed to occur from Pulse Client after data equivalent to 'Lifetime Kilobytes' set in the Pulse client is transferred, which was not happening on the MAC OS.

This issue is fixed from version 5.1R12HF1 (MAC build). It is recommended to use the latest build.

Before installing version 5.1R12HF1, be sure to uninstall the older Pulse version on your MAC OS. The reason is that the newer client uses Pulse Secure Certificates.

2020-06-27: Archived article.