User´s problem connection

[cymantilla]

Hi team, Please help: some clients have problems connecting to Global Protect, checking the log file shows the following:

attach the log file 

Please cant help 

[Raido_Rattameister]

Log provided don't include connection attempt to analyze what might be wrong.

[cymantilla]

I found exactly in the log the issue, i attach new log file, can u help ?

[Raido_Rattameister]

Your portal has self signed cert and your user workstation don't trust root cert that signed GlobalProtect Portal cert.

(P3808-T1348)Debug(1513): 02/14/25 09:31:02:410 Unable to verify server cert. Result is unable to get issuer certificate
(P3808-T1348)Debug(13946): 02/14/25 09:31:02:410 Server certificate verification failed XXXXXX : not signed by trusted root ca

[cymantilla · Accepted solution]

Thank you for your response. Today I had access to the equipment and attached an image of the error message. 

In the vpncolon certificate configuration, the portal's fqdn is set in the subject, while in image 4 the Serv_CertPN certificate that belongs to the vpncolon certificate as subject is the portal's ip while in the Issuer is the portal's fqdn, can you help me how to solve this problem please?

 

 

[Raido_Rattameister]

Self signed intermediate and root certs have expired.