topic Re: Certificate based VPN with Sonicwall ICA error in Firewall and Security Management

Certificate based VPN with Sonicwall ICA error

diburaj — Mon, 28 Mar 2022 14:28:34 GMT

Hello Team

I had a requirement of establishing the Checkpoint Gateway with the Sonic wall appliance with dynamic IP.

Check point supports only certificate based authentication if we have dynamic IP.

While trying to get the sonicwall CSR signed from the ICA tool the certificate is not getting validated in Sonicwall while uploading to sonicwall.

Can anyone let me know if you had a chance to get the similar setup working in your environment.

Regards

Dburaj

PhoneBoy — Thu, 31 Mar 2022 14:52:34 GMT

Sounds like an issue on the Sonicwall side.
What's the precise error?

diburaj — Thu, 31 Mar 2022 17:33:31 GMT

I am getting the attached error

The certificate that is signed from the ICA tool is put into the sonicwall and it shows not valid

PhoneBoy — Thu, 31 Mar 2022 18:02:30 GMT

Is the Sonicwall configured to accept the ICA as a valid Certificate Authority?
In any case, this sounds like a Sonicwall issue.

diburaj — Thu, 31 Mar 2022 18:04:44 GMT

Yes the ICA internal certificate is uploaded to Sonicwall as the trusted certificate.

PhoneBoy — Thu, 31 Mar 2022 18:24:24 GMT

Either way, more information is needed from the Sonicwall side to understand what, if anything, needs to be done on the Check Point end.

diburaj — Thu, 26 May 2022 21:58:11 GMT

The issue is fixed by the SonicWall. The sonic wall was unable to verify the certificate info.

SonicWall engineering team had developed a patch to fix the issue.

The upcoming releases in SonicWall will have the patch included.