topic Re: Global Protect Setup using an external CA in General Topics https://live.paloaltonetworks.com/t5/general-topics/global-protect-setup-using-an-external-ca/m-p/46650#M34290 <HTML><HEAD></HEAD><BODY><P>This is just a shot in the dark, but are the GP clients able to check cert validity against the external CA before they are authorized on the network? </P><P></P><P>-Benjamin </P></BODY></HTML> Fri, 26 Aug 2011 01:39:26 GMT bpappas 2011-08-26T01:39:26Z Global Protect Setup using an external CA https://live.paloaltonetworks.com/t5/general-topics/global-protect-setup-using-an-external-ca/m-p/46649#M34289 <HTML><HEAD></HEAD><BODY><P>Can anyone help with setting up GP to use certificates from an external CA ? </P><P></P><P>Ive managed to get it working using an internal CA &amp; signing the server &amp; client certificates defined in the portal against that - but Im struggling to get it working when I use an external CA to generate the certificates; where Im trying to get too is that we preload our laptops with certs signed against our Microsoft CA &amp; users can then use Global Protect to connect into the LAN using Kerberos to authenticate against the our Microsoft DC &amp; the preinstalled certificate on the laptop checked against a copy of the CA cert installed on the PA.</P><P></P><P>The Kerberos authentication is working fine, but I dont appear to be able to get the correct settings for GP portal &amp; gateway to use externally generated certificates.</P><P></P><P>Any ideas ?</P><P></P><P>Thanks - Nick.</P></BODY></HTML> Mon, 22 Aug 2011 11:23:36 GMT https://live.paloaltonetworks.com/t5/general-topics/global-protect-setup-using-an-external-ca/m-p/46649#M34289 SimmSimm 2011-08-22T11:23:36Z Re: Global Protect Setup using an external CA https://live.paloaltonetworks.com/t5/general-topics/global-protect-setup-using-an-external-ca/m-p/46650#M34290 <HTML><HEAD></HEAD><BODY><P>This is just a shot in the dark, but are the GP clients able to check cert validity against the external CA before they are authorized on the network? </P><P></P><P>-Benjamin </P></BODY></HTML> Fri, 26 Aug 2011 01:39:26 GMT https://live.paloaltonetworks.com/t5/general-topics/global-protect-setup-using-an-external-ca/m-p/46650#M34290 bpappas 2011-08-26T01:39:26Z