04-21-2013 12:23 PM
We are unable to get multiple gateways working correctly with Global Protect. When we have one portal and one gateway, clients are able to successfully connect and establish a VPN tunnel. With two gateways we get the following error from both the originally setup gateway and the gateway we are attempting to add: "Gateway x.x.x.x: Server Certificate Verification Failed" in the Global Protect Client -> Status -> Warnings/Errors dialogue.
Setup information:
Portal Hardware: PA-2050
Portal OS: 5.0.3
Gateway 1: Same as Portal above
Gateway 2 Hardware: PA-200
Gateway 2 OS: 5.0.3
Global Protect Portal License: YES
Global Protect Gateway 1 License: YES
Global Protect Gateway 2 License: YES
Certificate Authority Information:
Microsoft Server CA 2012
Portal - CSR issued to MS CA
Gateway 1 - CSR issued to MS CA
Gateway 2 - CSR issued to MS CA
Clients - Machine Certificate pre-installed via GPO from MS CA
