Certificate based VPN with Sonicwall ICA error

[diburaj]

Hello Team 

I had a requirement of establishing the Checkpoint Gateway with the Sonic wall appliance with dynamic IP.

Check point supports only certificate based authentication if we have  dynamic IP.

While trying to get the sonicwall CSR signed from the ICA tool the certificate is not getting validated in Sonicwall while uploading to sonicwall.

Can anyone let me know if you had a chance to get the similar setup working in your environment.

Regards

Dburaj

[PhoneBoy]

Sounds like an issue on the Sonicwall side.
What's the precise error?

[diburaj]

I am getting the attached error 

The certificate that is signed from the ICA tool is put into the sonicwall and it shows not valid 

[PhoneBoy]

Is the Sonicwall configured to accept the ICA as a valid Certificate Authority?
In any case, this sounds like a Sonicwall issue.

[diburaj]

Yes the ICA internal certificate is uploaded to Sonicwall as the trusted certificate.

[PhoneBoy · Accepted solution]

Either way, more information is needed from the Sonicwall side to understand what, if anything, needs to be done on the Check Point end.

[diburaj]

The issue is fixed by the SonicWall. The sonic wall was unable to verify the certificate info.

SonicWall engineering team had developed a patch to fix the issue.

The upcoming releases in SonicWall will have the patch included.