GlobalProtect Satellite Fails to Connect to GlobalProtect Portal

Issue

GlobalProtect Satellite Portal/Gateway and matching peer are setup but the connection fails. The trusted root CA signed by the GlobalProtect server certificate is imported properly into the GlobalProtect Satellite, as defined in How to Configure GlobalProtect Satellite.

Upon connection, the following error is returned:

GlobalProtect Satellite connection to portal failed.  Satellite failed to connect to Portal
1.1.1.1 due to "certificate was not trusted".

Resolution

This issue can happen on a multi-vsys enabled device and the "Shared" option is not checked when importing the trusted cert into the GlobalProtect Satellite device.

After the certificate is imported, check the "Trusted Root CA".

owner: jteetsel