Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

WebVPN-Problem with Digital Certificate and AAA

Hello everyone,

I have a problem during configuring WebVPN on ASA 5520 using AAA and digital certificate of Microsoft. (MSCEP)

Currently, The WebVPN service is enabled and it worked well with AAA (local or external) only,

But now, I want to use both AAA and Certificate for most secure-I mean that the users will be authenticated 2 times (firstly, it is checked by valid certificate then user/pass is second one).

Here are details:

I tried installation CA server (Microsoft CA service combined with SCEP) and register ASA with CA server (ASA work as subordinate CA)-->these steps is ok, asa has registed, then client use web-browser request CA and it's issued by CA administrator then it is installed on web-browser.

Testing:

The Client tried to test with access SSL VPN, the welcome WEBVPN message prompt user/pass but the message is "Logon Failed" before I give user and pass,

Does anyone know and advise ?

Thanks

Khanh

1 REPLY
New Member

Re: WebVPN-Problem with Digital Certificate and AAA

Hi all,

Here are attach files for my issuse,

Khanh

165
Views
0
Helpful
1
Replies
CreatePlease to create content