Hi Everyone,
Am wanting to enable CRL Checking of device certificate for Pre-Login tunnel.
I want to ensure the CRL in the certificate of the connecting NPA client will be available for verification but I'm unsure of the source doing the verification. The docs are not detailed enough.
Where will the CRL Checking request originate? Will it be our management plane or the one of the many NPA Gateway's the client may connect to or some other component (eg. Stitcher)?
Thank you
Please see https://docs.netskope.com/en/netskope-help/data-security/netskope-private-access/private-access-faqs/#what-access-needs-to-be-allowed-for-npa-to-work-correctly-1.
It is my understanding that the CRL request will originate from the management plane of your tenant. The article above has a link to the support portal which provides the specific IP address(es) per management plane.
Thanks @sshiflett those IP's listed in the KB you posted are making requests. Just the info I needed!
If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
