We are constantly having problem with the Pulse Secure VPN client asking for passwords in a login window that LOOKS like it is modal, but in fact is not. The cause problems where the password can end up anywhere even if the Pulse Secure login window is the frontmost window and the password text field has focus. This is especially bad if the password ends up in something like a chat window instead.
This is of course extremely poor design by Pulse Secure but unfortunately, they seems to be completely uninterested in fixing this. Anything we can do on our side to avoid these problems?
This is how the supposed-to-be modal Window looks like and the problem with it
what on earth is that shitty image hosting website.
Use the “Use Custom Page for Pulse Desktop Client Logon” option?
Bam, your login box now uses your web browser. Problem solved.
Please check out 9.0 release. There is a new feature with an embedded browser that can be used for Auth. This is key for always-On VPN for captive portal bypass for instance.
You should also open a ticket with support, and they will help you on provisioning these features.
The custom sign-in pages is also well developed. There is a download package on the PCS that is well documented and can be easily modified by a web developer.
Here is an example from Duo:
Completely agree, however that isn’t always a simple thing to do. Me personally would throw them out in an instant based on the fact that if they don’t care about this problem even when reported twice, what more problems do they have in the code? It seems likely that most normal users would not bother to change their passwords, even if it ended up in Skype or something.
Almost unbelievable bad and if I didn’t know for a fact that it is true, I probably would blame the users for being sloppy. Have happened to me twice now that the password instead ended up in Skype and that final enter key press sent it out ont the Internet. And yes, I made sure in both cases that the Pulse Secure window was the one “on top” and in 99,9% of the cases you catch this in time, but then comes that time when you are in a hurry and stressed and bang…time for password change again 
Thanks, will try that. Would call it more of a workaround though as the problem is still the fact that PulseSecure can’t handle a Modal window, if they could, this would have been a non issue. Thanks for the tip though.
Thank you for the info. Will do that!
Well, no, I said I would want to throw it out the door ASAP, but that it is a bit difficult as it is part of a larger infrastructure. BTW, just received an email that my post about this at the PulseSecure forum had been deleted, so obviously, their ide of problem solving is trying to hide the problem rather than making a solution. Scary…
