Skip to main content

Ivanti issues on a Mac

  1. Completely uninstall the old Ivanti, including the library files* (if they exist as shown in their FAQ) - there may not be any library/preference files though.
  2. Restart the machine — this is important!
  3. Then reinstall the new Ivanti
    1. https://www.it.ucsb.edu/ivanti-secure-access-campus-vpn/get-connected-campus-vpn
  4. Then manually add a connection profile according to the instructions in the README**

The following are instructions on how to "deep clean" an old version from your Mac OS:

1. Open a terminal window and enter the following commands to show "hidden" files:

  • defaults write com.apple.Finder AppleShowAllFiles true
  • killall Finder

2. Remove the old Pulse Secure files with the following commands:

  • sudo rm -rf ~/Library/Application\ Support/Juniper\ Networks/SetupClient
  • sudo rm -rf ~/Library/Application\ Support/Juniper\ Networks/HostChecker.app
  • rm -rf ~/Library/Logs/Juniper\ Networks
  • sudo rm -rf /Applications/Network\ Connect.app
  • sudo /usr/local/juniper/nc/install/uninstall_nc.sh

3. Open Finder. If present, drag the following to Trash:

  • Library/Application Support/Juniper Networks 
  • Library/Application Support/Juniper Networks (from the User profile )
  • Library/Application Support/Juniper Networks (from root/Macintosh HD )

4. Also try the following:

  • Uninstall Junos Pulse (if installed) by dragging /Applications/Junos Pulse.app to the Trash.
  • Remove /Library/LaunchDaemons/net.juniper.UninstallPulse.plist.org.
  • Remove ~/Library/Application Support/Juniper Networks/SetupClient.

5. When done, reboot the machine and install the new Ivanti Secure Access client.

** ReadMe Text:

As of August 2, 2021, Duo multi-factor authentication (MFA) is required to sign in to the campus VPN (Ivanti Connect Secure, formerly Pulse Secure).

You can test/validate your campus VPN connection with MFA by using the pre-configured “UCSB Remote Access Trusted”  profile in the Ivanti Connect Secure client Connections list.  If you do not have the “UCSB Remote Access Trusted” profile in your Connections list, you can add it with the URL https://ps.vpn.ucsb.edu/ra-trusted.   (Optionally, you may delete the old “UCSB Remote Access” profile from the Connections list - however, after August 2, both the “UCSB Remote Access” and “UCSB Remote Access Trusted” profiles will behave identically, and both will require MFA.)

As such, we are no longer maintaining clients with separate connection profiles for "UCSB Remote Access" and "UCSB Remote Access Trusted".  The single custom client will contain only the new "Remote Access Trusted" connection profile for new installations.

Their Connection Profiles are pre-configured with the relevant Trusted URL:

UCSB Remote Access Trusted:
https://ps.vpn.ucsb.edu/ra-trusted

This installer may be used to install over a pre-existing Ivanti Connect Secure VPN (or Pulse Secure) client installation - it will append to the existing connection profile, if the above do not already exist.

More Info

ITS Suggestions:
Please go through the "Deep Clean Steps for macOS" at the link below in order for the VPN to work correctly:
https://help.ivanti.com/ps/help/en_US/ISAC/22.X/ag-22.X/uninstall_isac.htm

Please note the details under macOS (https://it.ucsb.edu/ivanti-secure-access-campus-vpn/get-connected-campus-vpn).
Specifically, for Catalina use use Catalina_v22.2r1.0-b1295.

Once that is completed, restart your computer and install the latest version available here:
Box: https://ucsb.app.box.com/folder/127781382319?s=tgtc8qb4460awsljgyrexx5zk160n7kr
Google Drive: https://drive.google.com/drive/u/0/folders/1FUbeV0rIegpWbVB-nYeOxl78KWfbjYJR

The process of initializing the VPN software has changed from in the past. The workflow is outlined here under Usage:
https://it.ucsb.edu/get-connected-vpn/ivanti-secure-access-vpn-client-mac-os

If you have any issues, please let us know.

Back to top