topic Global Protect Always On Mac OS in GlobalProtect Discussions

Global Protect Always On Mac OS

ryanmead — Mon, 04 Mar 2024 19:38:33 GMT

I have a PA-850 with global protect configured to be always-on with pre login.

On Windows im able to install the certs generated on the firewall and connects fine.

On my mac it says: "A valid client certficate is required for authentication". I have installed the certs in keychain access. When i visit the web portal the cert is there and trusted.

I have attached the PanGPS log.

I would assume this is an issue with the mac but is there something i need to change in the firewall?

Thanks,

Ryan

Re: Global Protect Always On Mac OS

JayGolf — Wed, 06 Mar 2024 06:22:28 GMT

Hi @ryanmead ,

I think there may be an issue with the install on Mac. Taking a glance at the logs it looks like there is a path issue or the file might not exist. Could you open up the contents of the cert and compare it with the windows cert?

Re: Global Protect Always On Mac OS

ryanmead — Wed, 06 Mar 2024 17:05:02 GMT

Hi,

I have attached screenshots of the certs on both windows and mac.

I thought the same thing that there was a problem with the global protect install on mac, but i tried it on a different mac and it was the same result.

Thanks,

Ryan