Loading...
Loading...
- Hybrid ZTNA or Universal ZTNA is configured on FTD - Private Resource on Secure is configured to be redirected to FTD i.e LOCAL enforcement - Client is sending the re-direct to FTD FQDN but unable to access the PR - Debug logs shows : zproxy-4:socket [DEBUG] TLS handshake failed - CRL has expired zproxy-4:socket [DEBUG] No certificate found during handshake
- Hybrid ZTNA or Universal ZTNA is configured on FTD - Private Resource on Secure is configured to be redirected to FTD i.e LOCAL enforcement
Workaround cd /ngfw/etc/cron.daily ls -lah cat uztna_crl_support.sh vim uztna_crl_support.sh CRL_URL_PATH="/ngfw/var/sf/bin/crl_url.txt"----- > update it to CRL_URL_PATH="/ngfw/var/sf/zproxy/uztna_crl_url.txt" run the script python3 /ngfw/var/sf/bin/uztna_crl.py
PSIRT Evaluation: The Cisco PSIRT has evaluated this issue and determined it does not meet the criteria for PSIRT ownership or involvement. This issue will be addressed via normal resolution channels. If you believe that there is new information that would cause a change in the severity of this issue, please contact psirt@cisco.com for another evaluation. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
Cisco Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.