topic Re: Checkpoint remote vpn first connect warning certificate untrusted in SASE and Remote Access

Checkpoint remote vpn first connect warning certificate untrusted

leangm — Thu, 28 Mar 2024 07:46:33 GMT

remote vpn IPsec certificate is not trusted! when first create vpn sites. How can we clear this pop-up when first connect from user

Re: Checkpoint remote vpn first connect warning certificate untrusted

Martijn — Thu, 28 Mar 2024 08:24:38 GMT

Hi,

You need to replace the default VPN certificate for a VPN certificate the clients trust.

Check the current VPN certificate on the gateway object -> IPSec VPN.

The certificate you see there should be the one clients are seeing when connecting for the first time.

Generate a certificate signed by a CA which is trusted by the clients.

Martijn

Re: Checkpoint remote vpn first connect warning certificate untrusted

leangm — Fri, 29 Mar 2024 17:22:55 GMT

I have generate a new certificate for vpn. but when client create a new vpn site gateway doesn't provide the new certificate name, the gateway still show the previous certificate

is there we can clear the old certificate for ipsec vpn.

Environments

Smart-1 cloud

gateway 6400