JNCIE-SEC

Practice session

You are configuring CRL (Certificate Revocation List) checking on an SRX for IKEv2 certificate validation. The CRL distribution point (CDP) URL is in the peer certificate, but the SRX must also check a local cached CRL. In Junos, what determines which CRL source the SRX uses?

Loading your practice session…