Decrypt Error When Connecting to GlobalProtect via 3rd Party Office Network

NickodeAndresACN — Tue, 17 Jun 2025 11:06:19 GMT

We have a user currently working from a 3rd party remote office for a project. When connected to the 3rd party's local network and then to GlobalProtect VPN, the user is unable to access any websites. Our logs indicate a decrypt error occurring during this process.

Interestingly, when the same user connects to GlobalProtect using a mobile hotspot or other external network, everything works fine—no decrypt errors, and full access is restored. This leads us to suspect that the issue lies within the 3rd party office's network configuration—possibly SSL inspection, firewall rules, or proxy interference.

However, troubleshooting has been difficult as the 3rd party insists there are no issues on their end and has not been cooperative in further investigation.

Has anyone encountered a similar issue where a local network interferes with GlobalProtect VPN traffic, resulting in decrypt errors?

Re: Decrypt Error When Connecting to GlobalProtect via 3rd Party Office Network

OtakarKlier — Tue, 17 Jun 2025 16:18:08 GMT

Hello,

Just as you have found out, you cannot SSL decrypt VPN traffic in the middle as its called a man-in-the-middle attack. They are either SSL decrypting it or not allowing it. Since its a 3rd party, I would recommend the user just use their hotspot. Its the same advice I give to our people.

Regards,

topic Re: Decrypt Error When Connecting to GlobalProtect via 3rd Party Office Network in General Topics

Decrypt Error When Connecting to GlobalProtect via 3rd Party Office Network

Re: Decrypt Error When Connecting to GlobalProtect via 3rd Party Office Network