topic Re: Firewall default trusted certificates status in CLI in General Topics

Firewall default trusted certificates status in CLI

vij — Fri, 24 Mar 2023 04:34:58 GMT

Hi Team,

I want to know if there is a way to monitor the firewall default trusted certificates status in CLI?

Re: Firewall default trusted certificates status in CLI

BPry — Fri, 24 Mar 2023 20:57:16 GMT

I'm not aware of any way to monitor this in the CLI. The only configuration action that actually exists for this is adding them to the root-ca-exclude-list. I'm not aware of any way in the CLI to actually look at the individual root certificates.

Re: Firewall default trusted certificates status in CLI

MP18 — Sat, 25 Mar 2023 20:48:20 GMT

@vij One way to know if cert is going to expired is using AIOPS which needs PAN OS 10. and also paid subscription of AIOPS.

In this case send the email notification to email address configured in the AIOPS.

Other than this I do not know anyway to monitor the certs on the PA.