explanation needed for CRL check for external CAs

Jonathan — Mon, 16 Nov 2020 11:26:59 GMT

Hi,

I'm looking for an explanation about the CRL machanism for external CA (R80.20)

Here's our scenario -

Users use Checkpoint Mobile VPN client to connect to the Checkpoint gateway. Authentication is performed using a client certificate that we create for each user on our internal CA, and the users install on their PC.

I am trying to figure out who, when and how exactly is the CRL of the client certificate is being checked?

All articles I found online only regard Checkpoint Internal CA.

Any help would be much appreciated.

Thank you

Re: explanation needed for CRL check for external CAs

G_W_Albrecht — Mon, 16 Nov 2020 15:34:04 GMT

You GW must be able to resolve the crl.name.net somehow... This is the topic of sk105246 Users are not able to connect to Mobile Access Portal with certificate issued by a third party CA.

topic Re: explanation needed for CRL check for external CAs in Endpoint

explanation needed for CRL check for external CAs

Re: explanation needed for CRL check for external CAs