topic SSL inbound inspection question in General Topics

SSL inbound inspection question

ctovazzi — Thu, 10 Sep 2015 08:02:55 GMT

Hello,
I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed.

I think PAN support only one Decryption rule for public IP.

It's possible to have multiple SSL certificate for same public ip address and multiple decryption rule for same ip ?

Tnx

Re: SSL inbound inspection question

reaper — Fri, 11 Sep 2015 12:36:07 GMT

Hi there

you could add custom url categories to the destination to differentiate between the 2 hostnames:

regards

Tom

Re: SSL inbound inspection question

ctovazzi — Fri, 18 Sep 2015 14:47:09 GMT

Hello Tom,
I try, but commit failed 😞

Carlo

Re: SSL inbound inspection question

reaper — Fri, 18 Sep 2015 15:12:08 GMT

Hi Carlo

Could you confirm what the error message is during the commit ?

I've reproduced this in my lab but was able to commit

thanks!

Tom