In Cisco's X15.5 tests, MRA plus UC traversal plus SSH tunnels worked when the Expressway-C client certificate held both Server and Client EKU and all other certificates were Server EKU only; with Server-only EKU on Expressway-C and EKU checking ON at Expressway-E, the UC zone showed FAILED.

Checked 2026-10-01

Vendor
Cisco
Product
Cisco Expressway
Subsystem
traversal-zone
Deployment
on-premises
Region
not restricted
Release range
X15.5
Checked
2026-10-01

Sources

Cite this note

APA

WarmTransfer. (2026, October 1). Troubleshooting Expressway Mobile and Remote Access: source note expressway-mra-troubleshooting-x155-core-both-eku. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-mra-troubleshooting-x155-core-both-eku

BibTeX

@misc{warmtransfer-claim-expressway-mra-troubleshooting-x155-core-both-eku,
  title  = {Troubleshooting Expressway Mobile and Remote Access: source note expressway-mra-troubleshooting-x155-core-both-eku},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-mra-troubleshooting-x155-core-both-eku},
  note   = {Source note expressway-mra-troubleshooting-x155-core-both-eku, checked 2026-10-01}
}

Read in context