cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3253
Views
0
Helpful
0
Comments
TCC_2
Level 10
Level 10

Core issue

This is a new feature. The ASA/PIX is not able to validate WebVPN/SSL VPN Client certificates using OCSP as the certificate revocation list (CRL) method in ASA 7.2(1) and above.

Resolution

OCSP, which provides an alternative to CRL for obtaining the revocation status of X.509 digital certificates, is only supported for IPsec clients in ASA 7.2(1) and above..

Refer to OCSP for more details.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: