topic Re: R80.10 can't resolve CRL distribution point address in SASE and Remote Access https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12801#M14215 <HTML><HEAD></HEAD><BODY><P>Thanks for sharing how you resolved the issue.</P></BODY></HTML> Thu, 23 Nov 2017 00:05:41 GMT PhoneBoy 2017-11-23T00:05:41Z R80.10 can't resolve CRL distribution point address https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12799#M14213 <HTML><HEAD></HEAD><BODY><P>I'm trying add external CA for authentication of remote clients. When I disable CRL checking all works fine. But when I enable this check the gateway send "can't retrieve crl" message to client.&nbsp;</P><P>CRL distribution point address leads to internal net resource, which does not present in internal DNS. That's why it was added in hosts file from GAIA's management portal.&nbsp;</P><P>In vpn debug present "Can't resolve address". But, when I reboot gateway it starts resolving CRL distribution address and it begin works &nbsp;up to 10-15 minutes.</P><P></P><P>On R76 and R77.30 this setting works without any problems.</P><P>Any ideas?</P></BODY></HTML> Sat, 18 Nov 2017 08:09:50 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12799#M14213 Anton_Kazantsev 2017-11-18T08:09:50Z Re: R80.10 can't resolve CRL distribution point address https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12800#M14214 <HTML><HEAD></HEAD><BODY><P>Adding A-recod on DNS and rebooting nodes resolved the issue</P></BODY></HTML> Tue, 21 Nov 2017 11:35:21 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12800#M14214 Anton_Kazantsev 2017-11-21T11:35:21Z Re: R80.10 can't resolve CRL distribution point address https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12801#M14215 <HTML><HEAD></HEAD><BODY><P>Thanks for sharing how you resolved the issue.</P></BODY></HTML> Thu, 23 Nov 2017 00:05:41 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/R80-10-can-t-resolve-CRL-distribution-point-address/m-p/12801#M14215 PhoneBoy 2017-11-23T00:05:41Z