Global Protect connects even machine certificate not present in store

Reply
L2 Linker

Global Protect connects even machine certificate not present in store

Has anyone encountered this issue ?

 

https to portal interface IP gives an error "Valid client  ceriticate required".

GP users are still able to connect to GP VPN even if machine certificate not present in store. 

 

I have Global protect Portal configuration > Agent > App > Client Certificate Store Lookup as "Machine". 

L7 Applicator

Re: Global Protect connects even machine certificate not present in store

@Psrivastava ,

In the gateway's Client Authentication what does your authentication profile actually look like? 

L2 Linker

Re: Global Protect connects even machine certificate not present in store

Gateway's Client Authentication uses an LDAP profile for user authentication. 

L6 Presenter

Re: Global Protect connects even machine certificate not present in store


@Psrivastava wrote:

Gateway's Client Authentication uses an LDAP profile for user authentication. 


 

 

Is your connection requirement for both domain user id/pw and valid machine certificate?

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!