Verify a certificate is being used

[cdooer]

Hey everyone. We're implementing certificate verification as an added layer of security on our VPN gateways, and so far testing is going well. Rather than requiring a certificate as soon as we push the certificate verification out, we would like to use the option where it will use the cert if it's there, but not require it if it's not. 

All that said, is there some sort of log we can look at in order to make sure clients are indeed using the certificate, allowing us to catch some of the stragglers that might not have it installed on the client side yet?

Thx,

dp

[G_W_Albrecht]

Only client logs are available in trac.log (client log) from Endpoint Security VPN thatshowthe auth steps - but i found this that could help: https://community.checkpoint.com/t5/Management/SmartView-VPN-Client-enhanced-view/m-p/78873#M48