aaa rules certificate address mismatch problem

[draganskundric]

I have several web sites with different names that are protected by aaa rules and external radius server against which user must authenticate. Problem is that when fw send its page with username and password, browser reports certificate address mismatch, because ther is difference between site name in ASA self signet certificate and site that is accessed. Is there a way to avoid this by some config in ASA. I know it is possible to turn off this check in IE, but thi is not preffered way for solving this.

thanks

[Marcin Latosiewicz]

Dragan,

I've played long time ago and only in the lab with CTP so I was never bothered by warnings.

What do you have configured?

Did you try using redirect with listener?

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/a1.html#wp1556188

Do you have secure client enabled?

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/a1.html#wp1556729

I'm not sure if even installing a proper cert on the ASA/PIX will help.

Marcin

[draganskundric]

we solved it by using identity

certificate on ASA that has all server names that are accessed, stated in CN of certificate, a

nd this is working