WebVPN-Problem with Digital Certificate and AAA

khanh_isphn — Sun, 10 Mar 2019 22:28:57 GMT

Hello everyone,

I have a problem during configuring WebVPN on ASA 5520 using AAA and digital certificate of Microsoft. (MSCEP)

Currently, The WebVPN service is enabled and it worked well with AAA (local or external) only,

But now, I want to use both AAA and Certificate for most secure-I mean that the users will be authenticated 2 times (firstly, it is checked by valid certificate then user/pass is second one).

Here are details:

I tried installation CA server (Microsoft CA service combined with SCEP) and register ASA with CA server (ASA work as subordinate CA)-->these steps is ok, asa has registed, then client use web-browser request CA and it's issued by CA administrator then it is installed on web-browser.

Testing:

The Client tried to test with access SSL VPN, the welcome WEBVPN message prompt user/pass but the message is "Logon Failed" before I give user and pass,

Does anyone know and advise ?

Thanks

Khanh

Re: WebVPN-Problem with Digital Certificate and AAA

khanh_isphn — Mon, 29 Oct 2007 04:59:29 GMT

Hi all,

Here are attach files for my issuse,

Khanh

topic Re: WebVPN-Problem with Digital Certificate and AAA in Network Access Control

WebVPN-Problem with Digital Certificate and AAA

Re: WebVPN-Problem with Digital Certificate and AAA