topic Re: CRL not downloading in General Topics

CRL not downloading

Strachf — Mon, 17 Oct 2011 03:23:24 GMT

Hi,

I have just noticed that my PA-2050 has in it's system logs regular entries as follows:

I also get similar entries for every different certificate server I can think of.

Reason I ended up looking at this stuff was actually for a different certificate error.

The other problem I get is when I log into my terminal servers.

These servers are setup in a farm with rdp gateway installed.

This worked perfectly when we had ISA as our gateway.

Now that we have switched to the PA-2050 we get an error message on login.

The error message is: A revocation check could not be performed.

I have been able to get around it by putting some manual entries into the rdp file.

However ideally I would like to fix this permanently.

Any thoughts?

gswcowboy — Mon, 17 Oct 2011 03:46:21 GMT

Have you enabled CRL lookup on the device?

Regards,

Renato

Strachf — Mon, 17 Oct 2011 23:44:18 GMT

Yes - it has been enabled hence it checking for a CRL..

bpappas — Mon, 17 Oct 2011 23:47:20 GMT

@stmcadmin:

are you allowing the traffic from the management interface to the internet so that the device can check CRL from each of the CA's?

-Benjamin

choff123 — Tue, 01 Oct 2013 22:15:20 GMT

i have those errors and i did not have CRL enabled.