Who rated this post

Hi @Marcin_Jakubiec ,

Yes there is!  If you navigate to Network > GlobalProtect > Portal > [edit portal] > Agent, you will see a TRUSTED ROOT CA section on the bottom.  Add your CA there.  If you check the INSTALL IN LOCAL ROOT CERTIFICATE STORE check box, the CA will be pushed to the client.  If you click on the ? in the upper right, then GlobalProtect Portals Agent Tab hyperlink, you will read "To install (transparently) the trusted root CA certificates that are required for SSL Forward Proxy decryption in the certificate store on the client, select Install in Local Root Certificate Store."

Thanks,

Tom