Forum Discussion

Dean_Miller_908's avatar
Dean_Miller_908
Icon for Nimbostratus rankNimbostratus
Jan 23, 2009

How does Firepass determine the FQDN of connecting machine?

Hi!     We have our firepass working with a pre-logon endpoint inspection of a machine certificate (does the standard check of CN equal to FQDN). However, my CISO is asking how the Firepass...
BIG-IP Access Policy Manager (APM)
remote access
security
Mike_Ho's avatar
Mike_Ho
Icon for Cirrus rankCirrus
Feb 17, 2009
FYI I opened a support case and learned the following:

 

 

If the computer is joined to a domain then the FQDN is computer name . domain. It will match exactly what you see in the "Full computer name" field of the "Computer Name" tab of the system properties control panel. It is case sensitive, too.

 

 

If the computer is not joined to a domain then the certificate CN only needs to contain the computer name (case sensitive). If the computer has any connection-specific DNS suffixes one of those can be present in the cert but it is not required.