Tutorial: GlobalProtect Client Certificate Authentication

Certificate authentication is one way to reduce the usage of complicated and insecure passwords. This tutorial will demonstrate the process to configure client certificate authentication with the Palo Alto Networks Global Protect remote access VPN solution.

[HughJass-]

One of my favorite Certificate demos!
❤❤

[yunusemrebektas]

thank yo Kenan. certificate topic is generally too complex but your demonstration is so simple. quickly understand :)

[douglaspayne]

Great demo, super simple and straightforward!
Now, if only in real-life this was the case.
How about a video that implements Client Cert Auth AND Username Password on both the Portal and Gateway?
Or maybe your thoughts are implementing both under the Client Authentication profile of either the Portal or the Gateway?

[escarlai]

great video, easy to understand these step

[mandarkulkarni]

on certprofile, username feild - subject - common name, my query is does same cname needs to be matched on client cert ? or does domain name on gateway cert and client cert needs to be matched ?

[alexlora]

please make a video about how to configurate Lets encrypt, cerboot with palo alto?

[lisev]

When i connect to GP, internet stops working. How can this be fixed?

[locatejohn]

What about the server authentication? You have Min1Max in the ssl/tks setting. Is that needed?

[ozlemmenguloglu]

matching client config not found? how can we solve it?

[mathieuarpin]

Hello, I managed to install the client certificate on one machine and got connected to the VPN. But on another machine I installed the same certificate and it didn't connect. Globalprotect seemed to have installed a self signed root certificate and refused to connect saying the certificate is not signed by a trusted certificate authority…

[RickHollmer]

Not finding the certificate is the exact reason I came here. LOL.

[kapakmaut]

Im getting stuct after enter passcode "Please input passcode" on Linux PC, please help