CRL-Check in VSX - Remote Access VPN

morris — Wed, 24 Sep 2025 07:29:56 GMT

Hi Guys,

I have difficulties to trace which interface is used by an VSX-Gateway for CRL-Checking. I did some tcpdumps but could not really follow:

VS0 - 192.168.1.1

VS1 - 10.10.10.1

VPN Clients are configured for VS1 as VPN-Site. PKI is configured in a third network somewhere in the LAN.
I see connections to the PKI via Port 80. Logs are shown with VS0 and other logs with VS1 as Source-IP.

Which Interface is used for that CRL-Check and is it possible to configure this?

Re: CRL-Check in VSX - Remote Access VPN

PhoneBoy — Wed, 24 Sep 2025 21:42:00 GMT

Logical answers are one of:

Main IP of VS (listed in the Main tab of the object)
Outbound interface per routing table

topic Re: CRL-Check in VSX - Remote Access VPN in SASE and Remote Access

CRL-Check in VSX - Remote Access VPN

Re: CRL-Check in VSX - Remote Access VPN