Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Entering Certificate
+ Certificate
Authority
information on the
Authentication tab
Chapter 14: Configuring Virtual Private Networks
Configuring VPN Security Associations
The Certificate + Certificate Authority tabs in the Authentication window are
used to define certificate and certificate authority authentication for this VPN
association. This means each peer must be validated using certificates and
remote identities before entering into this VPN association. To configure the
certificate and certificate authority tabs, follow the steps below.
1 Select the Firewall Credentials sub-tab.
2 In the Firewall Certificate drop-down list, select the certificate that will be
used to identify the Sidewinder G2 to the remote peer. You can also click
the Firewall Certificates button to go to the Firewall Certificates window.
This is useful if you want to use a certificate that has yet to be created.
3 In the Firewall Identity Type field, select the type of identity to use when
identifying the Sidewinder G2 to the remote client. Only those identities
defined within the selected firewall certificate will be available in this field
Valid options are:
• E-Mail
• Fully Qualified Domain Name
• IP Address
• Distinguished Name
The Value field contains the actual value used as the Sidewinder G2 identity.
This value is filled-in automatically using the information from the
selected certificate. The field cannot be edited.
4 [Conditional] Select the Require Extended Authentication check box if you
want to use Extended Authentication. This check box is available only if an
authentication method is configured for the ISAKMP server. See “Extended
Authentication for VPN” on page 399 for more information on extended
authentication.
5 Select the Remote Credentials sub-tab.
6 In the list of Available Certificate Authorities, select a CA you want to add
as a trusted CA and click the ==>> button to add the CA to the Trusted List.
You can add several trusted CAs. To select a CA that has yet to be defined,
click the Cert Authorities button to go to the Certificate Authorities window.
In this window you can define the needed CA, and then return here.
7 In the list of Available Remote Identities, select a remote identity you want
to add to the Trusted identity list and click the ==>> button. You can add
several trusted remote identities. To select an identity that has yet to be
defined, click Remote Identities to go to the Remote Identities window. This
window allows you to define the needed identity, and then return here.
8 Complete this tab by doing one of the following:
• If you intend to change the Crypto or Advanced tab settings, go directly
to the next tab without clicking Add or Close.
• If you do not intend to change the Crypto or Advanced tab settings, click
Add and then click Close. Click the Save icon to save your changes.
• If you do not want to save this Security Association entry, click Close
without clicking Add.
445