topic Re: managing digital certificates and globalprotect gw certificate with panorama for vm series firewall in Panorama Discussions

managing digital certificates and globalprotect gw certificate with panorama for vm series firewall

AJ-Parashar — Fri, 18 Mar 2022 13:54:18 GMT

I am managing two vm series palos deployed in azure with panorama with active active configuration. All configurations are synced with panorama and everything works except the certificates. I just not getting how to set up certificates for both firewalls individually for both gui access and for globalprotect.

I have searched but cant find a solution.

Any help will be appreciated

Re: managing digital certificates and globalprotect gw certificate with panorama for vm series firewall

addawes — Tue, 22 Mar 2022 15:20:32 GMT

Regarding the GUI certs - do you have separate device templates for each firewall? If so you can push the respective certs to each template so they receive their individualized certificate. Then setup a SSL/TLS profile, associate the respective cert, then associate the SSL/TLS profile to the Device-General Settings box.

For the GP cert - you can upload the same certificate to both firewalls. Create a GP SSL/TLS profile and associate it to your GP portal and gateway.