topic Re: issue if there is a one certificate profile for Windows User-ID agents and Terminal Services (TS) agents in General Topics

issue if there is a one certificate profile for Windows User-ID agents and Terminal Services (TS) agents

Deepak25 — Sun, 05 Sep 2021 20:36:37 GMT

As per below image You can only assign one certificate profile for Windows User-ID agents and Terminal Services (TS) agents.

We want to enable secure communication only between User-id agent and firewall , so we will import server certificate only in user-id agent.

If we apply certificate profile under Device > User-Identification > Connection-Security , is there any issue to TS-agent status ?

Re: issue if there is a one certificate profile for Windows User-ID agents and Terminal Services (TS) agents

S.Cantwell — Fri, 10 Sep 2021 00:43:57 GMT

Hi there.

I do not believe there is any certificate profile needed for the Terminal Server Agent, so I believe it should be fine.

Re: issue if there is a one certificate profile for Windows User-ID agents and Terminal Services (TS) agents

BPry — Fri, 10 Sep 2021 03:27:20 GMT

@Deepak25,

I would lab this before you implement it, or make sure you do it within a change window. If you enable connection security The TS agent can use a certificate for authentication with the firewall, and by setting up connection security your firewall begins checking the certificate the TS agent and User-ID agent present.