About NamalW

@NamalW    Also you can push this registry setting with GP agent then cert pop up will not occur. Check this link   Certificate Selection by OID (paloaltonetworks.com)   Regards ... View more

PEAP-MSCHAPv2 to work, a certificate will be required on the domain controller, which needs to be signed by an Internal PKI CA.   As you can see above that my DC01 has a certificate issued by my Root CA SOS.local   On the firewall side, you should have the following configuration: From the screenshot above, we can see the certificate profile applied "PEAP-Cert", which will have by signing CA and authentication protocol is selected as PEAP-MSCHAPv2 After the config above, you can create an authentication profile with the RADIUS profile above an apply it to your Portal or gateway or both.  Hope that helps!  ... View more

if your GP-APP configuration on the firewall set to "User-Logon (Always On)" and Authentication Config to "save user credentials", the user should be directly connected to the Gateway after Windows-login. but here the user should be logged in before with Username&password/certificate.... First-Ever GP-Login is Important because then the GP-App download the configuration from the Portal. ... View more

Addition to recommendations from DF2020, please check if you haven't mis-typed the portal address on the GP client, I encounter the same issue where portal name was incorrect and GP client reported it as "Error: No network Connectivity. Please verify your network connection and try again"   ... View more

 I am currently experiencing the same issue with 9.0.7 and GP 5.0.8 ... View more

Hi @ebrookman    Thanks for the instructions, I followed the instructions as below but GP client MAC complains "client certificate not found" Certificate auth works fine on a windows machine and certificate lookup is set to 'machine store" in GP portal. Any ideas for troubleshooting? ... View more

Troubleshooting GP logs can be a challenge, as the logs are rather verbose. There's a really good knowledge base article that should help with some of the more common issues admins and users tend to run into:   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkBCAS   Beyond that, if you want to spend some time on learning the logs I'd recommend starting with a very simple portal/gateway setup with local auth. Check the logs of a successful connection to see what's normal. Then, start adding features for more complexity until you get to the point where your test setup mirrors your true GP setup.  ... View more