Stormshield SN series Configuration Manual page 333

Client certificate
If you choose to create your own CA, you will need to use two certificates signed by it. If
this CA is not a root authority, both certificates have to be issued by the same sub-
authority.
Page 333/448
Select the certificate submitted by the client to set up the SSL tunnel.
By default, the client certificate suggested is the one created during the initialization
of the firewall. It is issued by the CA dedicated to the default SSL VPN.
This certificate is the same for all clients. They can be authenticated once the SSL
connection has been established.
IMPORTANT
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SSL VPN