Situation: The client just created a new self-assigned certificate for Paloalto Firewall VPN. But it doesn’t work.

Troubleshooting: You need to add the new certificate to Gloableprotect Portals. Go to Network>GloableProtect>Portals>

Select the VPN portal. Go to Agent.

Click Add under Trusted Root CA and then add the self-assigned certificate.

It looks like this.
