topic Re: Anyconnect Certificate Authentication on Meraki Firewall running MX 16.9 beta in Wireless

Anyconnect Certificate Authentication on Meraki Firewall running MX 16.9 beta

KayiAlp — Mon, 30 Aug 2021 18:49:29 GMT

Our Meraki firewall runs MX 16.9 beta version. We have configured Anyconnect as our client VPN. We want to enable certificate authentication on Anyconnect and want to use machine-based certificates.

I created an enterprise CA and deployed machine-based (computer) certificates to test machines. I exported the certificate and uploaded it under Certificate Authentication but it is still unable to authenticate when trying to connect to the VPN on test machines. I have also updated the profile by checking Certificate Store Override and configuring key usage and extended key usage in certificate matching.

Has anyone tried configuring certificate authentication for Anyconnect? If so, how did you make it work? Please advise, Meraki Support was not able to provide much information.

Re: Anyconnect Certificate Authentication on Meraki Firewall running MX 16.9 beta

CMR — Mon, 30 Aug 2021 21:35:09 GMT

@KayiAlp you need to upgrade to 16.11, that feature is broken in 16.8 and 16.10

Re: Anyconnect Certificate Authentication on Meraki Firewall running MX 16.9 beta

KayiAlp — Sun, 05 Sep 2021 18:56:04 GMT

@CMR that worked, thank you! Appreciate the help!

Re: Anyconnect Certificate Authentication on Meraki Firewall running MX 16.9 beta

StephenGriffiths — Wed, 24 Nov 2021 14:12:34 GMT

So does Certificate Authentication work, because I see a note in the config that says it will use Certificate before STILL asking for user Credentials?