topic reverse proxy key doesn't match certificate in General Topics https://live.paloaltonetworks.com/t5/general-topics/reverse-proxy-key-doesn-t-match-certificate/m-p/20952#M15302 <HTML><HEAD></HEAD><BODY><P>We deployed our PA last month, generated an SSL certificate (forward trust, forward untrust, and trusted root CA), and created SSL decryption rules.&nbsp; Since the creation of the rules we are getting weekly medium system alerts (8 of them) stating "reverse proxy key ['cert_name]' doesn't match certificate issued to '1.1.1.1'."&nbsp; There are others that have 'IOS-Self-Signed-Certificate-[phonenumber]' listed instead of '1.1.1.1'.&nbsp; Thoughts?</P></BODY></HTML> Fri, 17 Aug 2012 15:50:43 GMT sconley 2012-08-17T15:50:43Z reverse proxy key doesn't match certificate https://live.paloaltonetworks.com/t5/general-topics/reverse-proxy-key-doesn-t-match-certificate/m-p/20952#M15302 <HTML><HEAD></HEAD><BODY><P>We deployed our PA last month, generated an SSL certificate (forward trust, forward untrust, and trusted root CA), and created SSL decryption rules.&nbsp; Since the creation of the rules we are getting weekly medium system alerts (8 of them) stating "reverse proxy key ['cert_name]' doesn't match certificate issued to '1.1.1.1'."&nbsp; There are others that have 'IOS-Self-Signed-Certificate-[phonenumber]' listed instead of '1.1.1.1'.&nbsp; Thoughts?</P></BODY></HTML> Fri, 17 Aug 2012 15:50:43 GMT https://live.paloaltonetworks.com/t5/general-topics/reverse-proxy-key-doesn-t-match-certificate/m-p/20952#M15302 sconley 2012-08-17T15:50:43Z Re: reverse proxy key doesn't match certificate https://live.paloaltonetworks.com/t5/general-topics/reverse-proxy-key-doesn-t-match-certificate/m-p/20953#M15303 <HTML><HEAD></HEAD><BODY><P>It indicates that the server cert that is presented is different from the one configured. Say, the site is looking for a "abc.com" and it is presented with the cert "abcd.com" you will receive this error.</P></BODY></HTML> Fri, 17 Aug 2012 16:42:08 GMT https://live.paloaltonetworks.com/t5/general-topics/reverse-proxy-key-doesn-t-match-certificate/m-p/20953#M15303 zarina 2012-08-17T16:42:08Z