Solved: Re: VPN Concentrator 3000 series with SSL problem

ccsam · ‎02-10-2003

I use http access to the vpn concentrator and install SSL on the logging page using IE 6. I did open up the file and installed sucessfully with the certificate into IE which I can view the content of the certificate through IE.

I did allow cookies and java scripting from the security tab for IE. Why I still can access using https? Any ohter configuration that I left out? I'm using https to access the private interface which have private ip address.

regards,

Sam

cairnsm · ‎02-10-2003

If you were setting the certificate up in a test environment, it may have the wrong IP address. Verify under Administration|Certificate Management that the IP address for your SSL certificate has the IP address of your inside interface. If you changed the IP since generating the certificate, it will no longer work. I am assuming that you have set everything up properly under Configuration|System|Management Protocols|SSL.

Hope it helps,

Mark

View solution in original post

mklaphek · ‎02-10-2003

If you're on the inside, then the only other thing to check is the certificate (assmunig that you left the defaults alone). Look under Administration --> Certificate Management --> SSL Certificate. Try to delete the one that's there (if there is one) and generate a new one. This should do it.

If you're outside and trying to access the outside interface via https, you need to make sure that you modify the filter to allow https in (the rules are incoming https in and incoming https out).

Importing the certificate doesn't help with access. It's an attempt to keep the certificate warning pop-up form occuring everytime you get to the concentrator. I must be doing something wrong, because I could never get it to work.

Hope this helps.

View solution in original post

cairnsm · ‎02-10-2003

If you were setting the certificate up in a test environment, it may have the wrong IP address. Verify under Administration|Certificate Management that the IP address for your SSL certificate has the IP address of your inside interface. If you changed the IP since generating the certificate, it will no longer work. I am assuming that you have set everything up properly under Configuration|System|Management Protocols|SSL.

Hope it helps,

Mark

ccsam · ‎02-13-2003

I had resolved my problems by regenerate the certificate under administration>Certificate management. The default ip address 10.1.x.x will change to address which I assigned to private interface.

regards,

Sam

mklaphek · ‎02-10-2003

If you're on the inside, then the only other thing to check is the certificate (assmunig that you left the defaults alone). Look under Administration --> Certificate Management --> SSL Certificate. Try to delete the one that's there (if there is one) and generate a new one. This should do it.

If you're outside and trying to access the outside interface via https, you need to make sure that you modify the filter to allow https in (the rules are incoming https in and incoming https out).

Importing the certificate doesn't help with access. It's an attempt to keep the certificate warning pop-up form occuring everytime you get to the concentrator. I must be doing something wrong, because I could never get it to work.

Hope this helps.

ccsam · ‎02-13-2003

Thanks in giving ideas on how to resolve SSL issue. I can use SSL to access VPN Concentrator now.

regards,

Sam