Configure Pulse Secure Devices

  1. Connect to your Pulse Secure device: launch an Internet browser and enter the IP address or device DNS name in the URL field (https://<IP address / Device DNS name>/admin).
  2. In the Web Interface, navigate to System Log/Monitoring.
  3. Under Log/Monitoring, expand the User Access link.
  4. Locate the Settings tab.
  5. Under the Select Events to Log, select the following (minimal requirement, select other events if needed):

    • Login/Logout
    • VPN Tunneling

  6. Under the Syslog Servers, complete the following fields:

    Option Description

    Server nameIP

    Specify the IP address of the computer where Netwrix Auditor Server resides.

    Facility

    Select desired facility.

    Type

    Select UDP.

    Client Certificate

    Use default values.

    Filter

    Select Standard.

  7. Save your changes.
  8. Switch to the Admin Access tab.
  9. Under the Select Events to Log, select the following (minimal requirement, select other events if needed):

    • Administrator logins
    • Administrator changes
  10. Repeat the step 6 for Syslog Servers configuration.
  11. Save your changes.
  12. Navigate to System Configuration Advanced Networking.
  13. Expand the Select the source port to be used for the following features link.
  14. Locate the Syslog parameter and set it to Internal.

    NOTE: Netwrix Auditor must be accessible from the selected network interface

  15. Save your changes.
  16. Start Netwrix Auditor.
  17. Navigate to your monitoring plan for Network Devices. See Monitoring Plans for more information.
  18. Provide the IP address of the interface you specified on the step 14 as the Computer item for your monitoring plan. See Computer for more information.