topic Block VPN access for lost iphone/ipad in General Topics

Block VPN access for lost iphone/ipad

saint-paul — Thu, 05 Apr 2012 12:22:27 GMT

Hi, I followed the document on how to create VPN for IOS devices with certificates, and I got it working.

I was wondering how I can deny a device VPN access for a device which is lost or stolen. Deleting the certificate Client ID certificate on the PaloAlto Box does not help. The device can still connect.

The user can change his password but I would prefer that a connection attempt is already blocked.

Do I need to work with certificate revocation for such a feature? Is there a description how such an architecture can be used with the AploAlto? Am I right that you need an external CA instead of the PaloAlto box for such a feature?

Thanks for any help

Re: Block VPN access for lost iphone/ipad

rmonvon — Fri, 06 Apr 2012 00:58:16 GMT

Hi...You will need to issue client certificates whereby each iOS device will be given a cert. The PA device can be configured to check for client certs and also check against the CRL for any revocation. You can then revoke the particular client cert if the device is lost/stolen.

Thanks.

Re: Block VPN access for lost iphone/ipad

teleworm — Mon, 29 Oct 2018 06:20:51 GMT

I have also lost my iPhone and I bought a new iPhone and I want to recover my iTunes account on my new iPhone but it shows me an error that error 4013 and I don't how to recover this and remove this error.

Re: Block VPN access for lost iphone/ipad

Remo — Mon, 29 Oct 2018 08:35:36 GMT

Somewhat the wrong forum 😛 (in case this isn't a Spam post)

... http://bfy.tw/KahO