The posture completes with success.Īny idea how to further troubleshoot? Am out of ideas right now.I hunt for vulnerabilities in open and closed source software. When posture scanning starts at 1% am forced to click connect anyway and then that is it. The portals of CPP and Admin do not show the untrusted certificate issue. I also tried to regenerate the certificate for portal only, by creating one that has as SAN the fqdn and ip address of the ISE. Took the Wireshark packet capture, and the certificate being presented is the correct one of ISE. The popup shows at the moment when the module starts to scan, at 1%. Note: during the process, this process shows up once, and the user needs to click connect once. Information: An圜onnect-win-webdeploy version: 4.10.xxĪny idea how I can further troubleshoot on eliminating this popup of untrusted server! Tried to import ISE1 Subordinate certificate in Certificate Trusted Authority in the Host, but I still faced the same error! Here, am not sure if I should import this as part of the process. An圜onnect configuration has home call list: FQDN of ISE1ĩ. CN of the certificate has also the same FQDN as ISE1, that FQDN that the host is reporting as unsecure.Ĩ.
SAN of certificate has FQDN of ISE1 and FQDN of ISE2. The ISE certificate SAN has the same FQDN of ISE.Ħ. The client provisioning has the same certificate as the ones ISE does in the web browser.ĥ. I've unchecked the "Block connections to untrusted servers", still not working.ģ. User am testing with does have local admin rights on the computer.Ĥ. It is also selected and this is how we achieve the EAP-TLS authentication successfully.Ģ.
Root CA is imported in All network hosts. ISE Certificate was generated as a Subordinate certificate and was signed from the Internal root CA. I did research in regards this and the I also tested them but did not fix the issue are:ġ. "Security Warning: Untrusted Server Certificate!" An圜onnect cannot verify server: ise1"Ĭertificate does not match the server name.Ĭertificate is not identified for this purpose. I have detached and made this question alone, as am still stugling with the following issue:
0 kommentar(er)
