Netskope Community
07-14-2023 04:14 AM - edited 07-15-2023 04:21 AM
Hi Everyone,
Am wanting to enable CRL Checking of device certificate for Pre-Login tunnel.
I want to ensure the CRL in the certificate of the connecting NPA client will be available for verification but I'm unsure of the source doing the verification. The docs are not detailed enough.
Where will the CRL Checking request originate? Will it be our management plane or the one of the many NPA Gateway's the client may connect to or some other component (eg. Stitcher)?
Thank you
Solved! Go to Solution.
07-19-2023 01:21 PM
Please see https://docs.netskope.com/en/netskope-help/data-security/netskope-private-access/private-access-faqs....
It is my understanding that the CRL request will originate from the management plane of your tenant. The article above has a link to the support portal which provides the specific IP address(es) per management plane.
07-19-2023 01:21 PM
Please see https://docs.netskope.com/en/netskope-help/data-security/netskope-private-access/private-access-faqs....
It is my understanding that the CRL request will originate from the management plane of your tenant. The article above has a link to the support portal which provides the specific IP address(es) per management plane.
07-24-2023 06:06 AM
Thanks @sshiflett those IP's listed in the KB you posted are making requests. Just the info I needed!
In order to view this content, you will need to sign in to your account. Simply click the "Sign In" button below
Sign In