Buy or Renew
Buy or Renew
NOTICE: You can now engage in the community. Learn about the great new Cisco Umbrella content.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Create a new article
3311
Views
0
Helpful
0
Comments

WebVPN/SSL VPN does not work with Public Key Infrastructure (PKI) and Online Certificate Status Protocol (OCSP) on the Cisco Adaptive Security Appliance (ASA)/PIX 7.2(1) and above

TCC_2
Level 10
Level 10

on ‎06-22-2009 05:32 PM

Core issue

This is a new feature. The ASA/PIX is not able to validate WebVPN/SSL VPN Client certificates using OCSP as the certificate revocation list (CRL) method in ASA 7.2(1) and above.

Resolution

OCSP, which provides an alternative to CRL for obtaining the revocation status of X.509 digital certificates, is only supported for IPsec clients in ASA 7.2(1) and above..

Refer to OCSP for more details.

Labels:
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents