topic Re: GlobalProtect 1.1.7 Subject Alternative Name (SAN) in General Topics https://live.paloaltonetworks.com/t5/general-topics/globalprotect-1-1-7-subject-alternative-name-san/m-p/8140#M6016 <HTML><HEAD></HEAD><BODY><P>The SAN field can be created on the firewall, but it is not explicitly indicated as that field.</P><P>When you generate a certificate on the firewall, one of the fields is Host Name. This is the Subject Alternate Name extension field:</P><P></P><P><IMG alt="SAN.png" class="jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/4506_SAN.png" /></P><P></P><P>Once generated, that certificate will contain portal.example.com as the SAN extension.</P></BODY></HTML> Mon, 15 Oct 2012 23:58:48 GMT gwesson 2012-10-15T23:58:48Z GlobalProtect 1.1.7 Subject Alternative Name (SAN) https://live.paloaltonetworks.com/t5/general-topics/globalprotect-1-1-7-subject-alternative-name-san/m-p/8139#M6015 <HTML><HEAD></HEAD><BODY><P><BR />I'm reading the changes to default behavior with certicifcates in the new GlobalProtect 1.1.7 and I don't know what the Subject Alternative Name (SAN) point is referring to. I generate all the certicates from the PAN firewall for the GlobaProtect authentication setup. The Common Name is clear but where do I need to check the Subject Alternative Name when generating these certificates on the PAN firewall?</P></BODY></HTML> Fri, 12 Oct 2012 02:13:38 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-1-1-7-subject-alternative-name-san/m-p/8139#M6015 frypan 2012-10-12T02:13:38Z Re: GlobalProtect 1.1.7 Subject Alternative Name (SAN) https://live.paloaltonetworks.com/t5/general-topics/globalprotect-1-1-7-subject-alternative-name-san/m-p/8140#M6016 <HTML><HEAD></HEAD><BODY><P>The SAN field can be created on the firewall, but it is not explicitly indicated as that field.</P><P>When you generate a certificate on the firewall, one of the fields is Host Name. This is the Subject Alternate Name extension field:</P><P></P><P><IMG alt="SAN.png" class="jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/4506_SAN.png" /></P><P></P><P>Once generated, that certificate will contain portal.example.com as the SAN extension.</P></BODY></HTML> Mon, 15 Oct 2012 23:58:48 GMT https://live.paloaltonetworks.com/t5/general-topics/globalprotect-1-1-7-subject-alternative-name-san/m-p/8140#M6016 gwesson 2012-10-15T23:58:48Z