https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-to-look-for-in-gp-logs-certificate-auth/m-p/479141#M2648 <P>I am having some users who experience Connection Failed for the certificate auth Global Protect session.</P><P>What are the top 4 or 5 things I should look for in Global Protect debug logs to pin down what's&nbsp;</P><P>behind this message?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="palomed_0-1649370767301.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/40090i1CA45AE0056D3537/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="palomed_0-1649370767301.png" alt="palomed_0-1649370767301.png" /></span></P><P>&nbsp;</P><P>On the back PAN side I am observing these steps in Monitor/Global Protect Logging for a good login:</P><P>&nbsp;</P><P>Portal Pre-Login</P><P>Portal Auth&nbsp;&nbsp; (Cert)</P><P>Portal Get Config GP_CLient Prelogin Machine Cert</P><P>Gateway Prelogin</P><P>Gateway Auth (sometimes cookie)</P><P>Gateway Register</P><P>Gateway Get Config (Client-Config – IP assigned)</P><P>Gateway Setup SSL</P><P>Gateway Connected</P><P>Gateway tunnel latency</P><P>Gateway hip check</P> Thu, 07 Apr 2022 22:34:57 GMT palomed 2022-04-07T22:34:57Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-to-look-for-in-gp-logs-certificate-auth/m-p/479141#M2648 <P>I am having some users who experience Connection Failed for the certificate auth Global Protect session.</P><P>What are the top 4 or 5 things I should look for in Global Protect debug logs to pin down what's&nbsp;</P><P>behind this message?</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="palomed_0-1649370767301.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/40090i1CA45AE0056D3537/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="palomed_0-1649370767301.png" alt="palomed_0-1649370767301.png" /></span></P><P>&nbsp;</P><P>On the back PAN side I am observing these steps in Monitor/Global Protect Logging for a good login:</P><P>&nbsp;</P><P>Portal Pre-Login</P><P>Portal Auth&nbsp;&nbsp; (Cert)</P><P>Portal Get Config GP_CLient Prelogin Machine Cert</P><P>Gateway Prelogin</P><P>Gateway Auth (sometimes cookie)</P><P>Gateway Register</P><P>Gateway Get Config (Client-Config – IP assigned)</P><P>Gateway Setup SSL</P><P>Gateway Connected</P><P>Gateway tunnel latency</P><P>Gateway hip check</P> Thu, 07 Apr 2022 22:34:57 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/what-to-look-for-in-gp-logs-certificate-auth/m-p/479141#M2648 palomed 2022-04-07T22:34:57Z