Clientless SSL VPN Certificate error

gandhi.ganesh · ‎10-24-2008

Hi,

i have recently configured Clientless SSL VPN in 5505 when i try to connect the FW Outside interface if (i,e, https://216.X.X.X) it throws an warning as

The security certificate presented by this website was not issued by a trusted certificate authority.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

jason_nah · ‎10-24-2008

How abt obtain a valid Cert from Verisign or free website like Starcom ?

gandhi.ganesh · ‎10-24-2008

Fine, what i need to to get that,

& will this certifcate be valid to my webserver which is there in DMZ

jason_nah · ‎10-24-2008

What my vendor did are :

1) get the cert (*.cer) and install on the pc that you are accessing outside the office.

or

2) go to http://cert.startcom.org/ and read up.

gandhi.ganesh · ‎10-24-2008

Hi,

I have installed the certificate in my pc, its fine now i am not the getting any error.

few questions:

1. is this certificate is safe, because we are going to use this to connect our webserver which is behind the FW

2. In how many pc's i can install this certificate.

jason_nah · ‎10-25-2008

1. Shold be safe. Since some guys from TechPro recommend it.

2. So far I didn't come across a limitation to install the cert.

gandhi.ganesh · ‎10-29-2008

Hi,

Can i import this certificate to FW? if yes how ?

because i can't install manually these certificates to all pc's of my client who are sitting around the world.

mu requirements is when we try to access https://216.x.x.x the fw should export the certificate file to client pcs

Waiting for the quick reply