GP Connection Failed - gateway could not verify the server certiticate of the gateway.

[PA_nts]

Hi All,

I have GP setup and working like a dream..... most of the times.

however i have a strange issue.. and seems to only affect Azure cloud PCs at the moment, normal users with laptops and desktops can connect no problem.

my certs are all valid and signed by an external CA.

however on Azure cloud PC's the connections are very intermittent.. works maybe 1/6 attempts. most of the time users get the error around unable to verify the certificate on the gateway.

pan-os running 10.1.10-h2

gp app version is 6.1.2

windows cloud PC running windows 365 enterprise, 2vCPU, 8gb and 256 GB SSD

tried deleting dat files on local drive, no luck.

tried unistall / reinstall GP app no luck.

tried with full admin rights, same issue.

tried installing the certs locally to the PC's in the certificate store.. no luck.

from these cloud PC's, i can log into the portal fine and no complaints about certificate

any ideas doubt there are much testing around these as yet.. might have to log a call with MS also.

thanks in adv

[Claw4609]

Hello,

Do verify, is your Gateway certificate a public cert or just the portal? And do you Azure machines trust this public root/intermediate certificate? 

I would also check the GlobalProtect logs on the firewall gateway and see if there is any more error information that points to anything.

I would also check the clients GlobalProtect debug logs, specfically the pangps and pangpa logs, as there should be more information related to specifically what it didnt like.