cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

185
Views
0
Helpful
2
Replies
Beginner

FTD Certificate Authentication - Remote Access VPN

Hello experts,

 

We recently migrated from ASA to FTD (FMC managed) running 6.4 code. The remote access SSL VPN works great with a Public signed cert, however we are no longer able to authenticate another VPN profile designed for Cisco IP Phones that uses certificate based authentication.

 

Looking at the phone logs, it appears that the FTD only uses the public signed cert during the exchange, is there currently a limitation on the FTD that only allows 1 CA to be used for certificate based authentication? We imported the phone's CA under FMC> Devices > Certificates and verified it on the FTD's CLI. The only difference I noticed is that on FMC, due to the fact I manually imported the CA's cert, its asking me to install identity certificate as well, which I don't have, nor it was required on the legacy ASA platform.

 

Could someone point me to the right direction?

 

Thank you,

 

Everyone's tags (2)
2 REPLIES 2
Beginner

Re: FTD Certificate Authentication - Remote Access VPN

After playing with GUI option for hours, I tried to deploy it using flexconfig and following the ASA syntax. It worked.. 

Hall of Fame Master

Re: FTD Certificate Authentication - Remote Access VPN

Thanks for the update.

Are you able to share the Flexconfig that you used? It would be a useful piece of knowledge for the community.