I am using CISCO VPN client when working remotely to join company's VPN. Once every 2-3 months I receive an alert like the following:
SSL Network Extender
Gateway's fingerprint has changed. Press Yes to accept [..]
CN: [the address of the site I am accessing to provide credentials to enter into VPN]
Old Fingerprint: HIGH CORD [..]
New Fingerprint: RAG RAVE [..]
I am wondering how safe is to blindly accept this change or should I talk to local IT to define a flow that allows VPN users to validate this fingerprint.
Question: CISCO VPN Client - Gateway's fingerprint has changed - what is the risk of simply accepting the change?