We have implemented Certificate based Authetication on VPN.
We are getting below message on Mobile when user connect to VPN using Capsule Connect/VPN.
"Malformed reply from site"
We have Certificate install on IPsec VPN from Internal PKI, and Portal certificate on Mobile access from the same PKI Server.
Same is working using AD Authetication.
Another information, AD of One Sister Company and PKI server is of Parent company. Because Mobile devices are managed by Parent company MDM and Mobile getting certificate from Parent Company PKI Server. That why we have got the server certificate from parent company on Checkpoint Mobile access portal. as well as Ipsec VPN.