topic Re: forward trust certificate in General Topics

forward trust certificate

scoobyboy — Wed, 15 Sep 2021 11:43:50 GMT

Hi, i have a requirement to do ssl inspection from traffic from 2 different security domains, i have imported CA and issuing certs from the different DC's etc, i have then created new 2 certs for the to be used as the forward trust certs, but when i click on the cert to select forward trust cert option, it seems I can only have one cert which is forward trust cert at one time on the firewall, as soon as i click on the other cert and select forward trust cert, the first cert has this option removed

So is it possible to have more then one forward trust cert on the firewall at the same time ?

Thanks in advance

Regards

Paul

Re: forward trust certificate

batd2 — Wed, 15 Sep 2021 15:39:07 GMT

@scoobyboy Unfortunately there is no way to specify multiple forward trust certificates, but this would definitely be a useful you should submit a feature request for it.

Not ideal, but certificates are virtual system specific and the only option I can think of and if s is to use multiple vsys for the different types of decrypted traffic.

Re: forward trust certificate

scoobyboy — Wed, 15 Sep 2021 16:09:44 GMT

@batd2 yeah i didnt think so, its a bit of pain, and i guess the Palo isnt a full blown proxy, problem is on a VM, so no vsys for me! but thanks for the reply,

Cheers

Re: forward trust certificate

MikeSangray2019 — Wed, 21 Sep 2022 14:48:24 GMT

Did you submit a feature request for this? I am working on a project with the same need - multiple forward trust certificates.