Hi Team,
I am getting below error while try to connect to GP.
When I am try to connect to the portal getting this error, any suggestions? before it was showing continue but not it is not showing.
Usually it will give the option to proceed anyway but it is not giving that option. After Reinstallation it is giving that option.
Accepted Solutions
Hi @SubaMuthuram ,
It sounds that like under the portal, agent config you are using either the default value (or specifically set it) for the option "Allow User to Continue with Invalid Portal Server certificate"
As you can imagine from the name it will not allow users to continue with connection if they don't trust the portal certificate.
Now there is a "Catch 22" - this is GP agent behaviour config which GP agent will receive from the portal on his fist connection.
When you manually re-install the GP agent application its default behaviour is restored, which will allow you to continue if you don't trust portal certificate. Once you connect and get the portal config from the firewall any subsequent connection will fail - because agent is now instructed to not continue if portal cert is invalid.
As described on the following link you could control this setting during installation - https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-apps/deploy-ap...
This way even the very first connection to portal will fail, because after installation agent default behaviour will be "don't proceed if cert is invalid"
