https://live.paloaltonetworks.com/t5/general-topics/pre-logon-gp-vpn/m-p/234619#M67259 <P>Ive read a number of guides, but for the life of me i cannot get pre-logon working. Is there an idiots guide to the required certs i need? Our clients already have a machine cert which we use for wifi authentication</P> Tue, 09 Oct 2018 18:45:10 GMT welly_59 2018-10-09T18:45:10Z https://live.paloaltonetworks.com/t5/general-topics/pre-logon-gp-vpn/m-p/234619#M67259 <P>Ive read a number of guides, but for the life of me i cannot get pre-logon working. Is there an idiots guide to the required certs i need? Our clients already have a machine cert which we use for wifi authentication</P> Tue, 09 Oct 2018 18:45:10 GMT https://live.paloaltonetworks.com/t5/general-topics/pre-logon-gp-vpn/m-p/234619#M67259 welly_59 2018-10-09T18:45:10Z https://live.paloaltonetworks.com/t5/general-topics/pre-logon-gp-vpn/m-p/234637#M67261 <P>Sorted it. I had a "subordinate CA" cert on the fw already, which was signed by our root CA. I used the subordinate CA to generate a certificate, which i then installed on my corporate laptop. Finally i created a certificate profile, referencing the subordinate CA, and attached this to the gateway config.</P><P>&nbsp;</P><P>Prior to logging in the windows login page now shows "connected"</P><P>&nbsp;</P><P>Ive rolled back for now while i come up with a rollout plan to push the certificate to all machines</P> Tue, 09 Oct 2018 20:28:16 GMT https://live.paloaltonetworks.com/t5/general-topics/pre-logon-gp-vpn/m-p/234637#M67261 welly_59 2018-10-09T20:28:16Z