This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
You can try this. It disables OpenSSL version 3. This is using the GUI version on Ubuntu 22.
Modify the file /usr/lib/ssl/openssl.cnf. At the end of the file you’ll see:
[system_default_sect] CipherString = DEFAULT:@SECLEVEL=2 Change that to: [system_default_sect] CipherString = DEFAULT:@SECLEVEL=1 Options = UnsafeLegacyRenegotiation Reboot and connect to the GP VPN portal.
... View more
Hi Raido,
Why is there even an option for the gateway client to generate cookies? Does that ever happen and how does it affect which profile is chosen? How can I see this behavior? Could you show an example? Maybe from the client logs?
... View more
Yes, we have it working.
When connecting to Global Protect and authenticating to Azure SAML, the embedded browser on Linux machines will fail during TLS handshaking . Force the client to use Firefox or what ever is the default browser.
Stop the Global Protect service.
sudo systemctl stop gpd.service
Create a new entry in the /opt/paloaltonetworks/globalprotect/pangps.xml configuration file. Set the default-browser value to yes under <Settings>.
Example:
<?xml version="1.0" encoding="UTF-8"?> <GlobalProtect> <Settings> <default-browser>yes</default-browser> <Settings>
Reboot.
... View more