topic Re: Self Signed Certificate for GlobalProtect VPN in General Topics

Self Signed Certificate for GlobalProtect VPN

TarofMate — Mon, 07 Mar 2022 12:01:29 GMT

Hello All!

We are having an issue regarding the Palo self-signed certificates.

As suggested without 3rd party paid certificate we are using a self signed CA and a certi issued by the CA.

(added to the proper ssl/tls service profile)

But the vpn portal does not show the generated Cert with the self signed CA, it shows the generated Cert with an unknown CA which expired in 2021!

Are we facing a bug or?

Thanks!

kiwi — Thu, 10 Mar 2022 12:30:08 GMT

Can you add some more details on how you configured it ?

Did you list the root-CA under the Trusted Root Section in the Portal configuration ?

Cheers,

-Kiwi

TarofMate — Wed, 02 Nov 2022 14:08:06 GMT

It turned out our Internet FW did SSL decryption, and in this cases as the seld signed was untrusted, it showed us the "Untrusted Decrypt" cert 🙂