topic Re: aaa rules certificate address mismatch problem in Network Security

aaa rules certificate address mismatch problem

draganskundric — Mon, 11 Mar 2019 18:04:49 GMT

I have several web sites with different names that are protected by aaa rules and external radius server against which user must authenticate. Problem is that when fw send its page with username and password, browser reports certificate address mismatch, because ther is difference between site name in ASA self signet certificate and site that is accessed. Is there a way to avoid this by some config in ASA. I know it is possible to turn off this check in IE, but thi is not preffered way for solving this.

thanks

Re: aaa rules certificate address mismatch problem

Marcin Latosiewicz — Tue, 29 Jun 2010 17:14:36 GMT

Dragan,

I've played long time ago and only in the lab with CTP so I was never bothered by warnings.

What do you have configured?

Did you try using redirect with listener?

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/a1.html#wp1556188

Do you have secure client enabled?

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/a1.html#wp1556729

I'm not sure if even installing a proper cert on the ASA/PIX will help.

Marcin

Re: aaa rules certificate address mismatch problem

draganskundric — Thu, 01 Jul 2010 17:44:16 GMT

we solved it by using identity

certificate on ASA that has all server names that are accessed, stated in CN of certificate, a

nd this is working