Global Protect certificate auth user/device information

emarschang — Wed, 13 Jul 2022 16:37:06 GMT

Currently we have a GP vpn setup for our mobile devices. We have are doing certificate based authentication, certificate is pushed out through an MDM. Basically if your device has this cert, your device connects. Is there a way to capture or pass through connected user information, for example username, email, etc.? Right now when looking at the GP monitor logs, it displays the source user as our public IP/CN of the cert. This would help to see who is connected or not, since the hostname field is whatever the mobile device is set to.

Re: Global Protect certificate auth user/device information

reaper — Thu, 14 Jul 2022 11:57:58 GMT

you would need to add the username in each certificate (as CN or SAN email) so that information can be pulled in lieu of an authentication username

topic Global Protect certificate auth user/device information in General Topics

Global Protect certificate auth user/device information

Re: Global Protect certificate auth user/device information