Hi Everyone,
we are using always on functionality with TND using secure SSL Servers. I have following questions:
1. I can enter several URLs and the hashes get generates. Does AnyConnect try to connect to servers from top to bottom in the list. That means if first server is not available then it goes to next?
2. How does the hash comparison exactly work? I mean, a user is connected to VPN in an "Untrusted Network". Then he "walks into" a trusted lets say WLAN Network with his laptop. Then will his laptop connect to the "Trusted Server" mentioned in XML Profile automatically and then compare the hash of the certificate presented by the server to the hash mentioned in the XML?
3. Is the certificate validity checked? I mean, if the certificate on the "Trusted Server" has expired but still this "Trusted Server" presents that certificate to the client that walked into trusted network, then will it still work since the hash will match?
Thanks and Regards,
R
