For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dean_Miller_908's avatar
Dean_Miller_908
Icon for Nimbostratus rankNimbostratus
Jan 23, 2009

How does Firepass determine the FQDN of connecting machine?

Hi!     We have our firepass working with a pre-logon endpoint inspection of a machine certificate (does the standard check of CN equal to FQDN). However, my CISO is asking how the Firepass...
BIG-IP Access Policy Manager (APM)
remote access
security
Mike_Ho's avatar
Mike_Ho
Icon for Cirrus rankCirrus
Feb 02, 2009
As far as I can tell it is not DNS but rather it looks at the host name and default domain of the machine.

 

 

E.g. on Windows XP open a command prompt and run ipconfig /all and then mash "Host Name" and "Primary Dns Suffix" together.

 

 

I have some machines with no default domain so the CN of their machine certificate is "computername." and that works fine.