The Security Gateway does not have a server certificate that is signed by a trusted 3rd party.

Hi are some tips and sk's about the certificates. Same time i have DR firewall, and i generated one certificate from IPSec VPN, and it works fine, my Endpoint Client ignores Mobile Portal and use right certificate (and it has rating A, because certificate chain is ok).Ĭould explain how it works and how to configure it properly? How it works in this case? for example for IPSec and for mobile? i think i will see error But i dont remember how i did it, and checkpoint support guy said - its wrong and need two certificates.

My certificate expired and i have to update it, when i did it first time, two years ago, version 80.30 didnt support wild card certificates, and i generated certificate from IPSec VPN and next used openssl magic for conversion to PFX format and next installed it to Mobile access portal. Which one using for Endpoint VPN client? i though Mobile is for Phones and IPSec like for legacy windows VPN clients. Third location (SAML) i guess not alive anymore. When i installed self-signed certificate into first location (IPSec VPN) and/or Mobile Access i was getting error. First of all - three location, first one - IPSec VPN (we can generate CSR with proper SSL Chain - Root/intermediate/Cert itself), second location - Mobile Access/Portal Settings, third - VPN Clients/SAML Portal. And i have no idea how to fix it.Īctually CheckPoint's SSL certificates are not clear for me.

My main question, how to reach Rating A on ? My certificate chain is broken.

Check point certificate VPN