topic Re: User´s problem connection in GlobalProtect Discussions

User´s problem connection

cymantilla — Wed, 19 Feb 2025 17:58:11 GMT

Hi team, Please help: some clients have problems connecting to Global Protect, checking the log file shows the following:

attach the log file

Please cant help

Re: User´s problem connection

Raido_Rattameister — Wed, 19 Feb 2025 19:57:39 GMT

Log provided don't include connection attempt to analyze what might be wrong.

Re: User´s problem connection

cymantilla — Wed, 19 Feb 2025 20:24:56 GMT

I found exactly in the log the issue, i attach new log file, can u help ?

Re: User´s problem connection

Raido_Rattameister — Wed, 19 Feb 2025 20:32:31 GMT

Your portal has self signed cert and your user workstation don't trust root cert that signed GlobalProtect Portal cert.

(P3808-T1348)Debug(1513): 02/14/25 09:31:02:410 Unable to verify server cert. Result is unable to get issuer certificate
(P3808-T1348)Debug(13946): 02/14/25 09:31:02:410 Server certificate verification failed XXXXXX : not signed by trusted root ca

Re: User´s problem connection

cymantilla — Fri, 21 Feb 2025 17:38:38 GMT

Thank you for your response. Today I had access to the equipment and attached an image of the error message.

In the vpncolon certificate configuration, the portal's fqdn is set in the subject, while in image 4 the Serv_CertPN certificate that belongs to the vpncolon certificate as subject is the portal's ip while in the Issuer is the portal's fqdn, can you help me how to solve this problem please?

Re: User´s problem connection

Raido_Rattameister — Fri, 21 Feb 2025 18:10:27 GMT

Self signed intermediate and root certs have expired.