VPN 3015 and CRL

[rob.wright]

I have a 3015 which is setup to use a Microsoft certificate server. It doesn't work with the CRL though. I continue to get the message:

Unsupported CRL distribution point protocol

I have setup the CRL to use http port 80. When I try and get the crl myself I am able to with a web browser.

Is there anything special about setting up the crl to work in Microsoft.?

[gfullage]

What version of code are you running on the 3000? Only 3.6 supported CRL checking via HTTP.

If you go to the Admin - Certificate Mgmt - Configure CA Certificate screen, there's box options for which protocol to use, you can select HTTP in there. You cna then also enter in the URL and you should be good to go.

Read all about it here:

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/3_6/admin/certman.htm#xtocid4

[rob.wright]

Found a document that states you have to be at 3.6 for http crl checking. So you were exactly right. We have upgraded and the crl is working now.

Thanks