i 'Im currently setting up a anyconnect vpn using multi certificate, and finding that the CRL or OCSP is not working.
Im using a yubikey with the personal certificate on it and a device certificate form a laptop, both of these are signed by our own internal CA. using the the CRL and the OCSP url which is imbedded in the certificate. The the virtual FTD is running version 7.
What im finding is that when the any of the certificates are revoked by the CA, anyconnect still connects, when it shouldn't.
I have looked in the logs and can't tell if the FTD is doing a CRL or a OCSP check, on the certificates, when to see if they are revoked like it should be.
Any help would be greatly apreaciated to see how i would get this working.
