October 13, 2008 03:05pm pdt

My Account

Top 15 Experts

Overall Top Experts

1RobWill 1,547,640
2lrmoore 1,059,686
3batry_boy 416,944
4grblades 215,434
5rsivanandan 156,746
6dpk_wal 135,395
7arnold 133,803
8TechSoEasy 112,468
9calvinetter 112,055
10mwecom... 88,949
11keith_ala... 86,935
12MrHusy 77,294
13tim_holman 75,964
14Qlemo 74,953
15Cyclops3... 72,785

	[x] Attachment Details

SSL Certificate for VPN on Cisco ASA installation question

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.8

Zones: Virtual Private Networking (VPN), Secure Socket Layer (SSL) & HTTPS, Cisco PIX Firewall

Tags: asa, certificate, ssl, cisco

Experts,
I have an ASA 5510 that I have set up for SSL VPN using an internal web server for RADIUS authentication. Currently to access the VPN, a user types in HTTPS://IP ADDRESS:PORT#
Since we are using the default SSL certificate from the device the user receives a pop up stating that the certificate has a problem, and they have to choose to continue or not.
I went to purchase a certificate and was told that we can't purchase an SSL cert for an IP address that we lease.
I usually leave the router/firewall configs for a security expert but have had little assistance in this area.
What would be the most secure way to proceed? Add an A record for the IP address through my ISP?
(The address we are using is the address for the external interface on the ASA.) or can we change the address being used for the VPN to be the same address as the one that the firewall translates through NAT?
Would it be better to add an additional address to the ASA just for the SSL VPN, is that possible?

IF anyone could give me some advice on which direction they've gone in setting up an SSL VPN with a 3rd party certificate on an ASA that would be very much appreciated. I've looked at the documentation on installing the cert ..I'm more confused on getting the security right on the addressing - is it a security risk to have an a record pointed to the IP addres of the external interface of my asa?
THANKS so much for your help.

	#	Title
	1	SSL VPN connected to only the ASA fi…
	2	Cisco SSL VPN - NAT problems
	3	SSL VPN recommandation
	4	What type of SSL cert do I need for SS…
	5	Cisco SSL-VPN License Pricing Quest…
	6	SSL Client VPN on a ASA - The ssl vp…