How the authentication will happen for GP if no Group Name and Group Password haven't configured

[SahulH]

Hi Team,

I just want to know on how the authentication will happen and IPSec connection will be established if we haven't configured X-Auth "Group Name" and "Group Password" under GP Gateway settings.

As i see that it will use the Certificate provided by the 3rd party VPN Client. So but i am bit confused on how to understand this scenario. Can you please help me to understand this better. Thanks in advance !!

Please review and clarify on the below comments.

Comments: "If no group name and group password are defined, the first authentication phase is based on a valid certificate presented by the third-party VPN client. This certificate is then validated through the certificate profile configured in the authentication section."

Best Regards,

Sahul Hameed

[kiwi]

Hi @SahulH ,

When a client certificate is the only means of authentication, the certificate that the user presents must contain the username in one of the certificate fields; typically the username corresponds to the common name (CN) in the Subject field of the certificate.

Is this the information you're looking for ?

https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-quick-configs/...

Hope it helps,

-Kiwi.