How to view an Anyconnect client authorisation certificate on ASA 5545

[johnjkjk84]

We are using an ASA 5545 to vpn tunnel ( with NAT traversal  and ike) and then authenticate Anyconnect clients on Windows desktops. I want to capture and view the certificate the client sends to authenticate. Any ideas ?

[hslai]

I moved this to Firewalls as this is not really an issue on AnyConnect.

Configure ASA as the SSL Gateway for AnyConnect Clients using Multiple-Certificate Based Authentication shows we would see the certificate info in the ASA debug.

[Divya Nair]

hi John,

As Hsing pointed out, crypto debugs would be the best way to view what certificates are being presented by the client.

debug crypto ca 127

debug crypto ca messages 127

debug crypto ca transaction 127

HTH,

Divya