Connection Failed GlobalProtect on a Mac

[jayteeville]

I am having an issue logging into the VPN on my Apple devices. I can connect to the VPN via the windows laptop, but I cannot on my Apple laptop. I keep receiving this error message on the Macbook Pro "[Error]: Gateway VPN External Gateway: The network connection is unreachable, or the gateway is unresponsive. Check the network connection and reconnect.". I can successfully access the VPN on windows without any issues, and I am using the same credentials to log in. Has anyone encountered this issue before?

[MickBall]

do you see a portal login earlier in the logs, are the portal and gateway on same box and using same tls profile.

is it possible to wireshark to see if gateway is responding at all???

not much help.... sorry.

[Eldwin]

I believed this is related to certificate for the Global protect. Are you using Macbook OS 15.x big sur? If yes probably the GP did not support for this one.

[KennethMcRae]

I had this issue as well and fixed it by adding a Host Name = "DNS" from Subject Alternative Name (SAN) field in the certificate attributes.

[nikoolayy1]

@MickBall could be having the idea that you have pushed the CA cert for the globalprotect on the windows devices using GPIO AD directory but maybe you have not done this for MAC using Jamf Pro or other mac managment tool and the MAC does not trust the Globalprotect gateway?

There was also an option for Globalprotect to ignore the portal invalid cert (there is no such option for the gateway) and if enabled even if you have the portal and gateway on the same place using the same cert this could explain the issue.

Also just in case push the system extensions for MAC:

https://docs.paloaltonetworks.com/globalprotect/5-1/globalprotect-app-new-features/new-features-rele...

Also if the gateway port is blocked I used this workaround before:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKPCA0

[nonono]

Hello,I encountered the same problem,did you solve this problem?