topic Re: global protect error - Error(6986): Protocol error. in General Topics

global protect error - Error(6986): Protocol error.

fatboy1607 — Thu, 01 Dec 2016 12:34:58 GMT

Error(6986): Protocol error. Check server certificate. Failed to ssl connect to 'globalprotect.xyz.com:443', Disconect ssl and returns false.

Re: global protect error - Error(6986): Protocol error.

fatboy1607 — Thu, 01 Dec 2016 12:42:47 GMT

(T4172) 12/01/16 11:52:11:749 Debug(1189): SSL3 alert write:fatal:unknown CA
(T4172) 12/01/16 11:52:11:749 Debug(1198): SSL_connect:error in error
(T4172) 12/01/16 11:52:11:749 Debug(1198): SSL_connect:error in error
(T4172) 12/01/16 11:52:11:749 Info ( 268): SSL connect failed (error:00000001:lib(0):func(0):reason(1))
(T4172) 12/01/16 11:52:11:749 Debug( 41): detailed SSL error info:
(T4172) 12/01/16 11:52:11:749 Debug( 44): *** error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Re: global protect error - Error(6986): Protocol error.

jdelio — Thu, 01 Dec 2016 22:39:02 GMT

@fatboy1607,

I responded to your other thread asking about GlobalProtect.. with links that should help..

But I can tell you that the problem clearly states "unknown CA" when it is trying to verify the SSL Certificate.

So, clearly there is an issue when it comes to the SSL Certificate CA.

Please refer to those links and see if they might help..

-joe

Re: global protect error - Error(6986): Protocol error.

fatboy1607 — Fri, 02 Dec 2016 06:46:12 GMT

Great thanks for your those links help really helpfull.

I was seeing below errors also

-------------------------------------

(T4172) 12/01/16 11:51:20:523 Info (1259): File C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_1de3dac2233344bb4142f29f152738e0.dat does not exist.
(T4172) 12/01/16 11:51:20:523 Error(5973): Failed to delete the file C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect\PanPUAC_1de3dac2233344bb4142f29f152738e0.dat.
(T4172) 12/01/16 11:51:20:523 Info (1259): File C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_1de3dac2233344bb4142f29f152738e0.dat does not exist.
(T4172) 12/01/16 11:51:20:524 Error(5992): Failed to delete the file C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg_1de3dac2233344bb4142f29f152738e0.dat.
(T4172) 12/01/16 11:51:20:524 Info (1259): File C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg.dat does not exist.
(T4172) 12/01/16 11:51:20:524 Error(6005): Failed to delete the file C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect\PanPortalCfg.dat.
(T4172) 12/01/16 11:51:20:524 Debug(5763): No scep profile

I deleted panPortalcfg file from location C:\Users\xyz\AppData\Local\Palo Alto Networks\GlobalProtect rebooted system

it created new panportalcf file and client was able to connect fine.

Thanks for your response.

Re: global protect error - Error(6986): Protocol error.

jdelio — Fri, 02 Dec 2016 17:45:18 GMT

Great to hear, glad it is working for you now.

-joe