VPN Peer Authentication with certificates

[registrato]

When I'm using digital certificates with VPN 3000 how can I be sure that I'm connecting with the correct concentrator and not with a rogue one which happens to be provided with a valid certificate, issued by a legitimate CA? In other words how is identity (IP address or hostname) checked by VPN 3000?

[pkapoor]

You need to find a resource that explains how PKI and Certificates work. (they are essentially device specific). That will answer your question.