-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
EX SSL-VPN: Support Certificate authentication for the client certificate where key size > 4096
03/26/2020 
10 People found this article helpful
484,304 Views
Description
EX SSL-VPN: Support Certificate authentication for the client certificate where key size > 4096
Resolution
Question:
Do we support client certificate authentication for Certificates created with Key Size >4096?
Details:
We currently support Client certificates of Key Size < 2048. Authentication using certificates with larger Key size might fail with error messages "ssl_error_illegal_parameter_alert" (or) "SSL connection error" depending on the browser used for the SSL Connection.
We have plans to support such large key size based client certificates in our upcoming 11.x firmware release (Feature Request CLIC#1657). For more details, please contact SonicWall Support.
Tracking ID: 142116, 1657
Related Articles
- How to Set Timeout for Inactive Tunnel Connections
- Commands for silent installation of NetExtender via CMD line
- Users on Netextender 10.3.0 version failing to connect with the following error message " Cannot get a response from the server "
YES
NO