Skip to main content

Ivanti issues on a Mac

  1. Completely uninstall the old Ivanti, including the library files* (if they exist as shown in their FAQ) - I didn’t have any library/preference files though
  2. Restart the machine — this is important!
  3. Then reinstall the new Ivanti
  4. Then manually add a connection profile according to the instructions in the README**

The following are instructions on how to "deep clean" an old version from your Mac OS:

1. Open a terminal window and enter the following commands to show "hidden" files:

  • defaults write com.apple.Finder AppleShowAllFiles true
  • killall Finder

2. Remove the old Pulse Secure files with the following commands:

  • sudo rm -rf ~/Library/Application\ Support/Juniper\ Networks/SetupClient
  • sudo rm -rf ~/Library/Application\ Support/Juniper\ Networks/HostChecker.app
  • rm -rf ~/Library/Logs/Juniper\ Networks
  • sudo rm -rf /Applications/Network\ Connect.app
  • sudo /usr/local/juniper/nc/install/uninstall_nc.sh

3. Open Finder. If present, drag the following to Trash:

  • Library/Application Support/Juniper Networks 
  • Library/Application Support/Juniper Networks (from the User profile )
  • Library/Application Support/Juniper Networks (from root/Macintosh HD )

4. Also try the following:

  • Uninstall Junos Pulse (if installed) by dragging /Applications/Junos Pulse.app to the Trash.
  • Remove /Library/LaunchDaemons/net.juniper.UninstallPulse.plist.org.
  • Remove ~/Library/Application Support/Juniper Networks/SetupClient.

5. When done, reboot the machine and install the new Ivanti Secure Access client.

** ReadMe Text:

As of August 2, 2021, Duo multi-factor authentication (MFA) is required to sign in to the campus VPN (Ivanti Connect Secure, formerly Pulse Secure).

You can test/validate your campus VPN connection with MFA by using the pre-configured “UCSB Remote Access Trusted”  profile in the Ivanti Connect Secure client Connections list.  If you do not have the “UCSB Remote Access Trusted” profile in your Connections list, you can add it with the URL https://ps.vpn.ucsb.edu/ra-trusted.   (Optionally, you may delete the old “UCSB Remote Access” profile from the Connections list - however, after August 2, both the “UCSB Remote Access” and “UCSB Remote Access Trusted” profiles will behave identically, and both will require MFA.)

As such, we are no longer maintaining clients with separate connection profiles for "UCSB Remote Access" and "UCSB Remote Access Trusted".  The single custom client will contain only the new "Remote Access Trusted" connection profile for new installations.

Their Connection Profiles are pre-configured with the relevant Trusted URL:

UCSB Remote Access Trusted:
https://ps.vpn.ucsb.edu/ra-trusted

This installer may be used to install over a pre-existing Ivanti Connect Secure VPN (or Pulse Secure) client installation - it will append to the existing connection profile, if the above do not already exist.