Android OS cannot connect on GP using ECDSA algorithm

[Ryan_Volante]

Hi, 

Is anyone encountering the same issue, where an Android user cannot connect to GP VPN? Here are the current settings:

PAN-OS version: 11.1.14-h7

GP on Android version: 6.1.6-730

Android version: 14

Fortunately, it was fixed temporarily by replacing the certificate used by the GP portal/gateway from ECDSA to RSA. Therefore, it was concluded that the root cause for this issue is the ECDSA algorithm.

My question is, are there any advisories (bugs)/guidelines related to this issue, and what is the recommended certificate to use with GP VPN on the Android OS?

[kiwi]

Hi @Ryan_Volante ,

These are the supported ciphers I could find:

https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-cryptography/...

You might want to reach out to TAC for updated info on GP 6.1

Kind regards,

-Kim.