Client Version: Pulse Secure 5.3.4 (1183) I did install the root Fiddler MITM cert and Fiddler automatically creates certs on the fly for the sites you visit for HTTPS decryption if you've enabled that feature. Right now I get stuck just after the following two requests to the Pulse endpoint, which look like this: 1. Results in a 200 CONNECT xxxxx:443 HTTP/1.1 User-Agent: Mozilla/4.0 Host: xxxxx 2. Never completes GET https://xxxxx/ HTTP/1.1 Host: xxxxx Connection: keep-alive User-Agent: odJPAService Content-type: EAP Upgrade: IF-T/TLS 1.0 Content-length: 0 On Mon, 2018-09-03 at 18:12 -0700, Daniel Lenski wrote: > On Mon, Sep 3, 2018 at 3:39 AM, Brandon Liles <brandon.liles at gmail.co > m> wrote: > > I haven't had any success trying to MITM the Pulse Secure handshake. > With Fiddler on Windows, after setting up HTTPS decryption, the > client > just spins saying "Connecting". > > Which version of the Pulse/NC client are you testing with? > Did you install the Fiddler MITM certificate as a root cert? > Are you able to inspect the traffic flow and figure out exactly where > it's getting stuck? > > -Dan > >
