GlobalProtect Commit Error: missing both client config and satellite config""
Resolution
Overview
GlobalProtect Portal configuration is required to provide configuration information to all GlobalProtect clients and/or GlobalProtect satellites (such as gateway information, certificates to be used for authentication or categories to be used for submitting host information).
Details
Configuring only the GlobalProtect Portal will not allow the commit to succeed if there is no Client Configuration or Satellite Configuration configured for the respective Portal Configuration resulting in the following error:
missing both client config and satellite config
(Module: sslvpn)
Commit failed
Hence, always ensure that at least any one of the configurations (Client or Satellite) is configured depending on the requirement for the commit to succeed.
Shown below is a sample Client Configuration:
Shown below is a sample Satellite Configuration:
Note: In scenarios where both Portal and Satellite configurations are present, accessing the GlobalProtect Portal (page https://<portal-IP>) will not display any data, as there is no Client Configuration present. The GlobalProtect Portal certificate warning might be seen if the trusted CA is not imported in the web-browser, but the GlobalProtect Portal login page will be not displayed.
See Also
GlobalProtect Configuration Tech Note
How to Configure GlobalProtect Satellite
Large Scale VPN (LSVPN) Deployment Guide
owner: gchandrasekaran