This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Hello Hulk Thanks for your answer. We found the issue. Somehow on this box was an override on the Issunig CA Certifcate in Certificate Management/Certifcates set. After we removed the overrided Global Protect worked again. Thanks, Ralph
... View more
We have upgraded 5 of our BranchOffice firewalls from 6.02 to 6.03 yesterday. All updates went fine except one: We are going to get an issue as soon as we want to connect via Global Protect to the Gateway. The window "Client Certificate Error" pops up: The error log shows: (T1636) 07/28/14 11:56:52:382 Error(8377): pan_obj_get_value() failed with tag client-cert. Returns false. (T1636) 07/28/14 11:56:52:382 Error(11081): Failed to export client cert. (T580) 07/28/14 11:56:52:414 Error(1813): UnsetRoutes: No route installed before (T1500) 07/28/14 11:56:57:883 Error(13454): Wait timeout for process PanGpHip.exe (T580) 07/28/14 11:57:25:242 Error(6122): pre-login error message: GlobalProtect gateway does not exist (T580) 07/28/14 11:57:25:554 Error(6350): unexpected response from server. (T580) 07/28/14 11:57:25:554 Error(5858): Failed to retrieve info for gateway 77.xxx.xxx.xxx (T580) 07/28/14 11:57:25:554 Error(9094): NetworkDiscoverThread: failed to discover external network. The only difference to the others is that we have Dynamic DHCP Client active on the Untrust Interface. However with 6.02 it still worked with this configuration. The Root and GP Certificates are valid and still the same as before we have updated to 6.03. Does anyone know what the problem could be? Can't find anything in the knowledgebase so far. Thanks, Ralph
... View more