ica and oscp

[Enrique_Alvarez]

i want to know if exist any way that change configuration of Internal CA on r 80.10 for using oscp instead of crl. Thanks

[PhoneBoy]

Why do to wish to make this change?
Never heard of anyone doing this.

[Enrique_Alvarez]

 if i am not wrong about working of crl, each client that try to validate with his certificate, it must to check it on each crl file that exist on ca server. More crl files, more time of cpu waste.

We only are evaluate options.

thanks in advanced

[PhoneBoy]

I've never heard of anyone running into an issue with this with respect to SIC.
In any case, we don't provide any mechanism to configure the ICA.

[Enrique_Alvarez]

i think that i explained bad.  I am talking abot internal CA for MAB users

My external remote users that connect with snx, they are using certificate in order to validate.

i am apologize for misunderstand

[PhoneBoy]

The same answer applies here as well.
If you use an external CA, I believe it is possible to enable OSCP.