search

steve-prentice / autopilot

GNU General Public License v3.0
29 stars 15 forks source link

script fails on 20225 eventID checks if VPNClient is using pulsesecure #1

Open vyguy opened 1 year ago

vyguy commented 1 year ago

when PulseSecure establishes certificate-based VPN connection, eventid 20225 never gets logged into application log. Thus author should probably replace 20225 get-winevent with test-netconnection -port 389 with domain controller of admin's choosing (or autoselect the environment variable's logonserver to confirm good line-of-site with a domain controller).

confirmed with pulsesecure 9.1.7 on winx64 10.0.19045.2486

steve-prentice commented 9 months ago

Great spot. This is written specifically for our org and for use with MS's AOVPN, but appreciate it might not worth smoothly with other VPN clients, as you've spotted. Good idea to use test-netconnection, I'd definitely suggest others modify the script and use that approach of not using AOVPN. Who knows, maybe one day I'll get around to updating this script!