Palo Alto Networks Knowledgebase: Cannot Change or Update Global Protect Server Certificate
Cannot Change or Update Global Protect Server Certificate
Created On 02/07/19 23:41 PM - Last Updated 02/07/19 23:41 PM
Zone and DoS Protection
In the picture below (click to enlarge), the gateway and portal are using the same IP address but different certificates (Server1 and Server2). Because the IP is the same the firewall will continue to use Server2 as the certificate.
If the portal's certificate needs to be changed, make sure the gateway is also changed and configured to use the same certificate as the portal.