Forum Discussion
eric_156978
Cirrus
CirrusOn-Demand Cert Auth Error Capturing
Hi,
I have an F5 terminating SSL and an access policy that uses "On-Demand Cert Auth" to get a client certificate, validate it, and authenticate it against an Active Directory server.
This...
Seth_Cooper
Employee
EmployeeHi Eric,
Do you by chance have your On-Demand Auth agent set to "require" instead of "request"? If set to "require" you will get a reset and the SSL handshake will not complete. If set to "request" then if a valid certificate is not present (either no certificate or a wrong certificate) then you will follow the fallback branch and continue with the VPE.
Seth
