Certificate authentication verifies the identities of SSL VPN users using a CA certificate in either of the following modes:
Certificate-anonymous mode: The SSL VPN gateway extracts user information carried in the CA certificate to verify the identities of SSL VPN users.
Certificate-challenge mode: The SSL VPN gateway verifies the identities of SSL VPN users by extracting user information carried in the CA certificate and meanwhile implementing local or server authentication.