Re: CRL Checking for VPN
From: Scott R (srenegar@maydaysecurity.com)
Date: 06/19/02
- Next message: Dmitri: "can't see logon/logoff events"
- Previous message: Reto Barandun: "Active Directory PC Lock down"
- In reply to: Michael [MS]: "Re: CRL Checking for VPN"
- Next in thread: Michael [MS]: "Re: CRL Checking for VPN"
- Reply: Michael [MS]: "Re: CRL Checking for VPN"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Scott R" <srenegar@maydaysecurity.com> Date: Wed, 19 Jun 2002 06:12:05 -0700
>-----Original Message-----
>If you are comfortable editing your registry here is how
you can force the
>VPN server to check the CRL in
>the published CDP every time. The cached CRL is ignored.
>
>Key:
HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent\Oakley
>Value: StrongCRLCheck
>DataType: REG_DWORD
>Data: 1 - Fail if revoked
>2 - Fail for any error
>
>
>
>--
>Michael Eisenhart
>Microsoft Support Professional
>Get Secure!! www.microsoft.com/security
>"Scott R" <srenegar@maydaysecurity.com> wrote in message
>news:10d0401c216f5$fbaea300$35ef2ecf@TKMSFTNGXA11...
>> Does anyone know how to enforce CRL checking with the
>> 2000 VPN solution?
>
>
>.
>Michael,
Thanks for the help..does this work the same way for
CRL checking for server to client IPSEC connections
through a IPSEC policy?
Thanks in advance...
- Next message: Dmitri: "can't see logon/logoff events"
- Previous message: Reto Barandun: "Active Directory PC Lock down"
- In reply to: Michael [MS]: "Re: CRL Checking for VPN"
- Next in thread: Michael [MS]: "Re: CRL Checking for VPN"
- Reply: Michael [MS]: "Re: CRL Checking for VPN"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
