Check Point Mobile VPN does not accept partial certificates issued by 3rd party

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk89800
Technical Level
Product	Check Point Mobile VPN
Version	R75.40 (EOL), R75.40VS (EOL), R75.45 (EOL), R76 (EOL)
Platform / Model	All
Date Created	13-Dec-2012
Last Modified	11-Sep-2014

Symptoms

Check Point Mobile VPN client shows error (has specifically been seen on version 1.128 running on iOS):
"Unknown user DN".
Smartview Tracker shows:
"Reject Reason: VPN-1 Authentication Service authentication failure".

Cause

Check Point Mobile VPN uses legacy CCC authentication, as a result only full DN certificates are allowed.

Clarification:

CCC (Client Control Channel) is a communication protocol between CP-RAS and its clients, designed as the channel for all control data, i.e., data that is not generated by the user.

Solution

Note: To view this solution you need to Sign In .