topic Re: OCSP Server not reachable in Firewall and Security Management

OCSP Server not reachable

ShadowNif — Wed, 24 Sep 2025 11:44:19 GMT

Hello,

I have a question regarding Cert Auth. on VPN. In our environment, we have a checkpoint Mobile vpn, and we are trying to add a layer of authentication over the username and password.
Root and SubRoot Cert. That already added as trusted CA to the Gateway. Although we're still facing some issues with the connection like this error :

"Client Machine Certificate Error: OCSP: could not connect to server. Make sure the server is up and running.CN=NBXXX,OU=phy,OU=XSA,OU=Tier22Identity,OU=05-sda-Tiering,DC=dsdd,DC=at"

LOGS VPN DEBUG;

Re: OCSP Server not reachable

ShadowNif — Thu, 12 Jun 2025 09:08:27 GMT

!!! I can ping and reach the OCPS Server from the Gateway !!!!

Re: OCSP Server not reachable

Steffen_Appel — Thu, 12 Jun 2025 09:54:13 GMT

Did you check the logs, if something is dropped?

It looks that either the host for OCSP can not be reolved or the http-Connection cannot be established.

Re: OCSP Server not reachable

ShadowNif — Thu, 12 Jun 2025 11:02:11 GMT

ive already mentioned that i can reach the Server with CURL_CLI and Ping

Re: OCSP Server not reachable

ShadowNif — Fri, 13 Jun 2025 08:01:40 GMT

Route on SMO was the issue

Re: OCSP Server not reachable

jameelalsarraj — Thu, 19 Mar 2026 08:50:01 GMT

Hello ... I have the same issue, could you please explain more what does it mean "Route on SMO was the issue"? Thank you.