About MandarKulkarni

Thanks that did worked for us. ... View more

faced same issue recently , you need to TAC involved with root access they restart cdb service if required delete some files.   ... View more

OK do you see network sign screen post installation of 5.2 Agent and creating all required registry settings ?   Is this something Palo Alto  Agent going to take care of ? ... View more

Looks like working solution but to integrate with existing environment ,where we are doing authentication of portal based on LDAP or Radius etc will not work in this case.   In such case we need OR  case  of Authentication if certificate authentication fails User authentication will work or viseversa ... View more

find attached   https://docs.paloaltonetworks.com/globalprotect/5-0/globalprotect-app-new-features/new-features-released-in-gp-agent-5_0/tunnel-preservation-after-logoff.html ... View more

To start with look at issue name if it signed by well known CA like verizon, commodo  digicert etc.   Also if If the subject and issuer are the same ? ... View more

you have set preferred gateway ? Did you configure tunnel retention under global protect portal profile ?         ... View more

Try this steps:   Disable WMI services : run - services.msc - Windows Management Instrumentation(WMI) - stop the service. Delete the files under C:\Windows\System32\wbem\Repository Open regedit Go to HKEY_LOCAL_MACHINE > Software and HKEY_CURRENT_USER > Software. Delete the Palo Alto Networks folder. Delete the same if the same folder is present in any other user under HKEY_USERS. Un-install GlobalProtect from Windows 'program and features'. Make sure that the virtual adapter in not present in the Network adapter settings. Reboot the machine. Reinstall GlobalProtect with admin privileges. Confirm that WMI service is running. ... View more

what is error you get ? ... View more

I suggest you go with PAN OS version 9.0 and latest GP client version.   Make sure under portal authentication is done using certificate.   looking at error it seems your certificate chain is not full.   take packet capture look at certificate sent cpature from client to check if it sending certiifcate. ... View more

You can setup IPSEC from One Satellite to 2 HUB Firewalls and configure Tunnel Monitor for fail over. In case of failure of connectivity with one hub all traffic  for satellite would get routed through other hub. You can setup this config  in Portal Profile giving appropriate gateway Priority.           ... View more

Did you upgrade OS , just to know if that fixed your issue ? ... View more

Do a check on following :-   Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\PanSetup Prelogon Value should be 1.   Check your machine certificate status.   your machine certificates it should contain private key.   Check certificate chain for machine certificate.   Troubleshooting logs what error do you see ?     ... View more

@aneeqzia  Are you referring connection with portal  from global protect client ?     ... View more