Enterprises and service providers have the difficult challenge of providing location- and device-independent network connectivity that is secure and capable of controlling resource access for authorized users. Breaches and threats continue to spiral out of control, and increasing numbers of employees and users want to use their own personal productivity solutions from devices to cloud based applications. Making this challenge even more difficult. Pulse Secure Connect Secure provides secure, authenticated access for remote and mobile users from any web-enabled device to corporate resources—anytime, anywhere.

Pulse Connect Secure is the most widely deployed SSL VPN for organizations of any size, across every major industry. Pulse Connect Secure includes Pulse Secure Clients and the AppConnect SDK. Pulse Clients are dynamic, multiservice network client for mobile and personal computing devices. Pulse Clients are simply deployed, enabling users to quickly “click and connect” from any device, anywhere. Pulse Secure AppConnect SDK delivers per application SSL VPN connectivity for iOS and Android clients, enabling IT to create an even more transparent and secure mobile app experience for their users.

Pulse Connect Secure is 15 years of innovation and refinement which has led to the most reliable and feature rich VPN built for the next generation.

Pulse Clients securely connect users to networks, both datacenter and cloud. Wrapped in an extremely user-friendly package, Pulse Client dynamically enables the appropriate network and security services on users’ endpoints. Users are not distracted from their work activities to figure out what network they are on or what service to enable. With Pulse Secure, the connection just works, helping to deliver the productivity promised by mobile devices. Pulse Client delivers dynamic access control, seamlessly switching between remote (SSL VPN) and local (NAC) access control services on Microsoft Windows devices. Pulse Client also enables comprehensive endpoint assessment for mobile and desktop computing devices, and quarantine and remediation, if necessary.

The digital world continues to create workforce productivity beyond BYOD. More enterprises are combining apps and data that were traditionally delivered privately on premises with a variety of 3rd party, cloud hosted service offerings, whether it be cloud based storage, SaaS applications or IaaS platforms. This evolution of combining and managing private and public IT architectural worlds is Hybrid IT. Learn how to embrace Hybrid IT with Pulse Cloud Secure and have the capabilities to blend cloud and datacenter access into a seamless user experience for your next generation workforce.

Pulse Connect Secure is available on a hardware-based (Pulse PSA or MAG Series) or as a virtual appliance as noted below.

*Total number of licenses cannot exceed the maximum supported per PSA Series Appliance.

Clientless Access Access web base apps and virtual desktop products with nothing to install.

Group Policy Integrate with directory services like Active Directory and LDAP.

Strong Authentication Support for two factor authentication, SAML 2.0, PKI, IAM and digital certificates.

Host Checker Ensure that the connecting device complies with your requirements.

Virtual Desktop Access Uncomplicated Secure Access to all the VDI leader's solutions.

Granular Auditing The when, where, what and how for security as well as capacity planning.

MDM Integration Integration with 3rd party solutions to enable enhanced policy enforcement.

Universal Client We reduce complexity with only one client, both remote or onsite, for smooth roaming.

That's just the beginning, take a look at features and benefits tab for more information.

Pulse Connect Secure provides complete end-to-end layered security, including endpoint client, device, data, and server layered security controls.

Enables customers to leverage existing investments in endpoint security solutions from third-party vendors.

Enables organizations to enforce security, compliance and visibility on all traffic from endpoints even when they are not on-prem.

In addition to enterprise-class security benefits, Pulse Connect Secure has a wealth of features that make it easy for the administrator to deploy and manage.

Provides transparent, secure data center connectivity for SAP services through the existing Pulse Secure VPN appliance. Additional details are available: https://www.pulsesecure.net/solutions/sap/

Leverages existing corporate authentication methods to simplify administration.

Enables customers who use advanced PKI deployments to deploy the Pulse Secure Appliances to perform strict standards-compliant certificate validation—before allowing data and applications to be shared between organizations and users.

Provides an individualized look for specified roles, streamlining the user experience.

Enables companies to conveniently manage, configure, and maintain PSA or MAG Series Appliances and other Juniper devices from one central location.

Support for latest generation browsers (Apple, Microsoft, Google, Firefox, etc) that do not support Java and Active X.

Diagram 1 - Dynamic UI for Pulse Connect Secure, Version 8.2

Pulse Connect Secure provides dynamic access management capabilities. When users log into Pulse Connect Secure, they pass through a pre-authentication assessment, and are then dynamically mapped to the session role that combines established network, device, identity, and session policy settings. Users have access only to those resources that are deemed necessary for that session, according to administratordefined policies.

Enables the administrator to provision by purpose for each unique session.

Offer another authentication layer option via email account.

Leverage ubiquitous smart phones to roll out a cost-effective and self-serve two-factor authentication mechanism, where one time passcodes are generated by a mobile app

Enables remote users to have multiple authenticated sessions open at the same time, such as when accessing VPN from a laptop and from a smartphone simultaneously.

Ensures a consistent experience for users who often travel from one region to another and therefore need to connect to different Pulse Secure Appliances running Pulse Connect Secure.

Provides mobile device users with a simplified and enhanced user experience and webpages customized for their device types.

Pulse Connect Secure offers comprehensive single sign-on (SSO) features. These features increase end user productivity, greatly simplify administration of large diverse user resources, and significantly reduce the number of help desk calls.

Pulse Connect Secure includes different access methods. These different methods are selected as part of the user’s role, so the administrator can enable the appropriate access on a per-session basis, taking into account user, device, and network attributes in combination with enterprise security policies.

Pulse Connect Secure currently includes several license options for enablement on the PSA or MAG Series Appliances.

Pulse Connect Secure (CONSEC) licenses are per concurrent session licenses. (Please see the Ordering Information section below for licensing details.)

CONSEC licenses provide SSL VPN functionality that allows users to access the network. They fully meet the needs of both basic and complex deployments with diverse audiences and use cases, and they require little or no client software, server changes, DMZ buildouts, or software agent deployments. For administrative ease of managing license counts, each user license enables as many concurrent sessions as specified in the license and they are additive. For example, if a 100 user license was originally purchased and the concurrent user session count grows over the next year to exceed that amount, simply adding another 100 user license to the system will now allow for up to 200 concurrent users sessions.

Key features enabled by this license include:

Customers have the ability to build clusters without buying any additional licenses. The clustering method can be explained in two simple steps:

If either box fails, the remaining box inherits the full 1,000 user licenses.

Clustering supports stateful peering and failover across LAN connection, so in the unlikely event that one unit fails, system configurations (such as authentication server, authorization groups, and bookmarks), user profile settings (such as user defined bookmarks and cookies), and user sessions are preserved. Failover is seamless, so there is no interruption to user/enterprise productivity, no need for users to log in again, and no downtime.

Please note that WAN clustering is not supported on the PSA or MAG Series. Multisite clustering is supported, however, provided the sites are on a campus network with LAN-like connectivity.

ICE (In Case of Emergency) License (Optional) SSL VPNs can help keep organizations and businesses functioning by connecting people even during the most unpredictable circumstances—hurricanes, terrorist attacks, transportation strikes, pandemics, or virus outbreaks—the result of which could mean the quarantine or isolation of entire regions or groups of people for an extended period of time. With the right balance of risk and cost, the ICE license delivers a timely solution for addressing a dramatic peak in demand for remote access to ensure business continuity whenever a disastrous event strikes. ICE provides licenses for additional users on a PSA or MAG Series Appliance running Pulse Connect Secure for a limited time.

With ICE licenses, businesses can do the following:

For the MAG Series Appliances, the ICE licenses are available in two forms: full ICE (which allows bursting to the full capacity of the MAG Series Appliances); and a 25% burst license (which allows bursting of up to 25% of the installed license count on any given MAG Series Appliances). For example, if the customer has a MAG6610 with a 1,000 user license, the 25% burst license option will support an additional 250 users during an unplanned event. Likewise, for the Pulse PSA Series Appliances, only the full ICE licenses are available.

Premier Java RDP Applet (Optional) With the Premier Java RDP Applet option, users can remotely access centralized Windows applications independent of the client platform (Mac OS, Linux, Windows, and so on) through Java-based technology. As a platform independent solution, the Premier Java RDP Applet lets you use the entire range of Windows applications running on the Windows Terminal Server, regardless of how the client computer is equipped. By centrally installing and managing all Windows applications, you can significantly reduce your total cost of ownership. The Premier Java RDP Applet is an OEM of the HOBlink JWT (Java Windows Terminal) product created by HOB Inc., a leading European software company specializing in Java programming.

Download the Pulse Secure Pulse Connect Secure Datasheet (.PDF)