An MRA traversal zone fails to establish when only the leaf certificate is trusted; the full chain (intermediates and root) of the peer certificate must be in each Expressway's trusted CA list.

Checked 2026-10-01

Vendor
Cisco
Product
Cisco Expressway
Subsystem
traversal-zone
Deployment
on-premises
Region
not restricted
Release range
technote updated 2023-06-22
Checked
2026-10-01

Sources

Cite this note

APA

WarmTransfer. (2026, October 1). Troubleshooting Expressway Mobile and Remote Access: source note expressway-mra-troubleshooting-traversal-chain. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-mra-troubleshooting-traversal-chain

BibTeX

@misc{warmtransfer-claim-expressway-mra-troubleshooting-traversal-chain,
  title  = {Troubleshooting Expressway Mobile and Remote Access: source note expressway-mra-troubleshooting-traversal-chain},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-mra-troubleshooting-traversal-chain},
  note   = {Source note expressway-mra-troubleshooting-traversal-chain, checked 2026-10-01}
}

Read in context