01-31-2012 04:11 PM
Hi All,
I'm trying to setup the Globalprotect VPN and have followed the (only partially helpful) GlobalProtect-Configuration-4.1.pdf to create certs and set everything up. When I try to connect to the portal site with my browser I get a certificate error - "Error code: sec_error_bad_signature".
It doesn't matter if I conect to the host name or the IP that I defined in the cert, I still get this error.
Does anyone know what the problem could be. Also, is there a way to actually see the certificates?
Thanks,
Kenton
02-01-2012 08:57 AM
Thanks @mbehlok, that helped a bit, now I get a 404 error saying /uro/ was not found on this server. Must be more that I'm missing inthe setup I guess. Any thoughts?
02-01-2012 09:03 AM
I too am getting this same error. I followed the document "GlobalProtect Configuration for 4.1" as much as I could. My Portal/Gateway does not have a FQDN, just an IP address.
Edit: Importing the Global Protect Gateway Cert allows my browser to reach the portal. BUT, I can not log in, and I get a message on the portal saying "Invalid client certificate".
02-01-2012 09:51 AM
I had a similar issue. I would get a certificate malformed error when trying to connect to the portal. I deleted all the certificates and started over. I was using underscores in the name for each certificate, I changed this to hyphens and made sure to fill out all the fields and it seemed to resolve the issue. Not sure why it did however and there is a chance that I had changed something else unknowingly during the process. It’s worth a shot I guess…
02-01-2012 07:57 PM
Does anyone succeed in configuring Globalprotect with OS 4.1 ? please help sharing !!!!!
02-01-2012 08:09 PM
Ovan,
I actually got it to work, and it seems to work very well, at least once I got the certificates to work.
What can I do to help? I can post up part of the configuration if that will help, or even some screen shots of the GUI.
Or if you want, get me access to the firewall if its in a lab environment and I can see if I can help out.
my direct email is mbehlok (at) sslmeetings.com
BTW, GP 1.1.2 is out, give that client a try as well as it seems to work better for me.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!