Palo Alto Networks Knowledgebase: Certificate Login to WebGUI with IE displays Login Page when Firewall has an Underscore in FQDN

Certificate Login to WebGUI with IE displays Login Page when Firewall has an Underscore in FQDN

1373
Created On 02/08/19 00:05 AM - Last Updated 02/08/19 00:05 AM
Resolution

Issue

While using Certificate Authentication with Internet Explorer (up to IE10), logging into the Palo Alto Networks device WebGUI causes the login page to be displayed instead of showing the Web UI page.

Checking the device system logs show that the user login succeeded. Logging in with Mozilla Firefox and Google Chrome web browsers work as expected.

 

Cause

Internet Explorer is ignoring/dropping cookies for site names that contain an underscore character.

 

Example: The URI and certificate common name for the Web UI is:

adm_stage.example.com

 

Resolution

To resolve this issue, change the DNS from adm_stage.example.com to adm-stage.example.com and recreate the user certificate with the new DNS name. Additionally, configure the site under Internet Explorer "Compatibility View".

 

owner: dmaynard

 



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClfuCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language