topic Re: Global Protect connects even machine certificate not present in store in General Topics

Global Protect connects even machine certificate not present in store

Psrivastava — Wed, 06 Mar 2019 16:35:36 GMT

Has anyone encountered this issue ?

https to portal interface IP gives an error "Valid client ceriticate required".

GP users are still able to connect to GP VPN even if machine certificate not present in store.

I have Global protect Portal configuration > Agent > App > Client Certificate Store Lookup as "Machine".

BPry — Wed, 06 Mar 2019 18:32:35 GMT

In the gateway's Client Authentication what does your authentication profile actually look like?

Psrivastava — Wed, 06 Mar 2019 18:48:13 GMT

Gateway's Client Authentication uses an LDAP profile for user authentication.

Brandon_Wertz — Thu, 07 Mar 2019 21:08:10 GMT

@Psrivastava wrote:
Gateway's Client Authentication uses an LDAP profile for user authentication.

Is your connection requirement for both domain user id/pw and valid machine certificate?