Client certificate profile with two CA (Globalprotect)

[JRSanch]

Hi,

We have PA-5050 version 6.0.7 and GlobalProtect cliente 2.3.3 (we also test 2.3.4). We have created a client certificate profile with two CA certificates, a portal configuration with this certificate profile and a gateway configuration with the same certificate profile and authentication against certificate's local database.

When we try to connect to the portal to download de Globalportect client (through IE, firefox and chrome), explorer show me a list of certificates signed for the both CA, we choose any of them and we can get the Globalportect client.
When we install the client, we try to connect but the client doesn't show us a list of certificate to choose, the client only shows all the certificates signed by one of the CAs configured, and always the same ones.

When we change the client certificate profile with only one CA (the one that doesn't work before), and then it works so the problem is not on CA certificates.

There is someone with this issue or someone knows about some kind of bug with the Globalportect client.

Thanks

[JRSanch · Accepted solution]

Hi,

I've just tried with Globalprotect client 3.0.0 and it works.

Regards