topic Re: VPN Certificate in SASE and Remote Access

VPN Certificate

Maik1 — Thu, 22 Dec 2022 06:58:10 GMT

Hello,

I have a question. We are currently testing that our VPN users also have to authenticate themselves with a certificate. The certificate that I give the user is valid for the same length of time as the default VPN certificate of the gateway. If I now renew the VPN certificate on the gateway, what happens to the user's certificate? Is it automatically renewed as well? Or do I have to issue a new one? If so, can he still authenticate with the old one?

Re: VPN Certificate

the_rock — Thu, 22 Dec 2022 09:03:36 GMT

Well, keep in mind, same as gateway cert, it has to be renewed manually, otherwise, it will cease to work.

Re: VPN Certificate

Maik1 — Thu, 22 Dec 2022 10:45:45 GMT

Hi,
OK, I understand. But what happens when I renew the gateway cert? Can the user then still log in with his cert or does he need a new one at that moment? Or does that have nothing to do with it?

Thanks for the response

Re: VPN Certificate

the_rock — Thu, 22 Dec 2022 11:36:29 GMT

Its been a while, but I believe they should be able to, as long as no cert is expired.

Re: VPN Certificate

Maik1 — Wed, 28 Dec 2022 09:29:34 GMT

Yes, I tried it, you're right.

Re: VPN Certificate

the_rock — Wed, 28 Dec 2022 12:45:13 GMT

Glad it works, thats the most important thing! Happy holidays.