topic Re: GlobalProtect SSL Cert change take effect immediately or require new GP session login? in GlobalProtect Discussions

GlobalProtect SSL Cert change take effect immediately or require new GP session login?

TonyDeHart — Mon, 06 Jan 2025 17:23:54 GMT

If I update an existing certificate for GlobalProtects Portal and Gateway does anyone know if that certificate change impacts existing already running connections once pushed or does it only take effect when someone reconnects again?

Re: GlobalProtect SSL Cert change take effect immediately or require new GP session login?

JayGolf — Thu, 09 Jan 2025 05:57:10 GMT

Hi @TonyDeHart ,

From what I've experienced, existing connections typically remain unaffected when the certificate is updated. The GP client maintains the session using the cert it validated during the initial connection. The new cert takes effect only during a subsequent connection or when the session is renegotiated.

Re: GlobalProtect SSL Cert change take effect immediately or require new GP session login?

TonyDeHart — Thu, 09 Jan 2025 12:53:26 GMT

That makes sense. Thanks for the help.