Solved

CRL Checking with Pre-Login Tunnel

  • 14 July 2023
  • 2 replies
  • 43 views
C
Badge +7

Hi Everyone, 

Am wanting to enable CRL Checking of device certificate for Pre-Login tunnel. 

 

I want to ensure the CRL in the certificate of the connecting NPA client will be available for verification but I'm unsure of the source doing the verification. The docs are not detailed enough.

 

Where will the CRL Checking request originate? Will it be our management plane or the one of the many NPA Gateway's the client may connect to or some other component (eg. Stitcher)?

 

Thank you

icon

Best answer by sshiflett 19 July 2023, 22:21

View original

2 replies

S
Rank
Userlevel 6
Badge +16

@Curious,

 

Please see https://docs.netskope.com/en/netskope-help/data-security/netskope-private-access/private-access-faqs/#what-access-needs-to-be-allowed-for-npa-to-work-correctly-1. 

It is my understanding that the CRL request will originate from the management plane of your tenant.  The article above has a link to the support portal which provides the specific IP address(es) per management plane.  

Sam ShiflettNetskope Solution Architect - North America
C
Badge +7

Thanks @sshiflett those IP's listed in the KB you posted are making requests. Just the info I needed!

Reply


Terms & ConditionsCookie settings