topic Re: Global protect certificate expiry in General Topics

Global protect certificate expiry

GideonKonga — Sat, 12 Jun 2021 07:43:45 GMT

Hi team,

Can we renew the server certificate used for gp before expiry can you please let me know if there would be any impact after renewing the certificate before expiry??

Or we need to renew the certificate before 1 day ???

Re: Global protect certificate expiry

aleksandar.astardzhiev — Sat, 12 Jun 2021 19:43:17 GMT

Hi @GideonKonga , No difference at all.

Re: Global protect certificate expiry

MP18 — Sun, 13 Jun 2021 06:45:34 GMT

@GideonKonga

Please see below link for Impact after the expiry and before the expiry period.

https://live.paloaltonetworks.com/t5/general-topics/certificate-renewal-impact-before-expiry/td-p/412698

Regards

Re: Global protect certificate expiry

HenriqueLobato — Sun, 13 Jun 2021 04:47:02 GMT

Dear @GideonKonga,

I believe there will be no impacts for Global Protect customers.

It may be necessary to log out and back from the VPN for the certificate to be changed.

What's not interesting is letting it expire, because customers will no longer have access to Global Protect.

Re: Global protect certificate expiry

GideonKonga — Mon, 14 Jun 2021 05:42:40 GMT

@aleksandar.astardzhiev @MP18 @HenriqueLobato we are using self signed certificate not a public CA.Please find the below article for reference earlier we faced the same issue.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clq0CAC