Global Protect connects even machine certificate not present in store

[Psrivastava]

Has anyone encountered this issue ?

https to portal interface IP gives an error "Valid client  ceriticate required".

GP users are still able to connect to GP VPN even if machine certificate not present in store. 

I have Global protect Portal configuration > Agent > App > Client Certificate Store Lookup as "Machine". 

[BPry]

@Psrivastava ,

In the gateway's Client Authentication what does your authentication profile actually look like? 

[Psrivastava]

Gateway's Client Authentication uses an LDAP profile for user authentication. 

[Brandon_Wertz]

---

@Psrivastava wrote:

Gateway's Client Authentication uses an LDAP profile for user authentication. 

---

Is your connection requirement for both domain user id/pw and valid machine certificate?