topic PA-820 management network don't have internet how do I get the device certificate working in Next-Generation Firewall Discussions

PA-820 management network don't have internet how do I get the device certificate working

din100 — Tue, 27 Aug 2024 10:53:47 GMT

My Palo don't have internet on the management network but I will need devices certificate on the devices to do the AIOPs logs but can't seems to get it work not sure which service on the service reroute to send it to the WAN interface.

Re: PA-820 management network don't have internet how do I get the device certificate working

akuzhuppilly — Mon, 02 Sep 2024 02:53:52 GMT

Hello @din100

You may change the service route for 'paloalto-networks-services' to the data interface that has Internet access, to fetch the device certificate.

The following document explains how to install device certificate:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/certificate-management/obtain-certificates/device-certificate

Re: PA-820 management network don't have internet how do I get the device certificate working

din100 — Mon, 02 Sep 2024 07:13:13 GMT

Thank you so much just to clarify I reroute the 'paloalto-networks-services' to say engineering network vlan which have internet and that should work right. Thank you so much I will give it a try

Re: PA-820 management network don't have internet how do I get the device certificate working

din100 — Mon, 02 Sep 2024 10:51:53 GMT

Thank you so much @akuzhuppilly worked like you said.