cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

495
Views
0
Helpful
2
Replies
johnjkjk84
Beginner

How to view an Anyconnect client authorisation certificate on ASA 5545

We are using an ASA 5545 to vpn tunnel ( with NAT traversal  and ike) and then authenticate Anyconnect clients on Windows desktops. I want to capture and view the certificate the client sends to authenticate. Any ideas ?

2 REPLIES 2
hslai
Cisco Employee

I moved this to Firewalls as this is not really an issue on AnyConnect.

Configure ASA as the SSL Gateway for AnyConnect Clients using Multiple-Certificate Based Authentication shows we would see the certificate info in the ASA debug.

Divya Nair
Cisco Employee

hi John,

As Hsing pointed out, crypto debugs would be the best way to view what certificates are being presented by the client.

debug crypto ca 127

debug crypto ca messages 127

debug crypto ca transaction 127

HTH,

Divya

Content for Community-Ad