https://live.paloaltonetworks.com/t5/general-topics/dynamic-dns-and-an-ssl-cert/m-p/289480#M76991 <P>How can I use dynamic DNS and SSL cert on the outside interface of the palo alto for global protect?</P><P>&nbsp;</P><P>I do not have a problem paying for something but I figured there is a way. I do not have a "server" at my home that is always on so I would need the palo alto to update the dynamic dns portion.&nbsp;</P> Sun, 22 Sep 2019 16:32:44 GMT Stevenjwilliams83 2019-09-22T16:32:44Z https://live.paloaltonetworks.com/t5/general-topics/dynamic-dns-and-an-ssl-cert/m-p/289480#M76991 <P>How can I use dynamic DNS and SSL cert on the outside interface of the palo alto for global protect?</P><P>&nbsp;</P><P>I do not have a problem paying for something but I figured there is a way. I do not have a "server" at my home that is always on so I would need the palo alto to update the dynamic dns portion.&nbsp;</P> Sun, 22 Sep 2019 16:32:44 GMT https://live.paloaltonetworks.com/t5/general-topics/dynamic-dns-and-an-ssl-cert/m-p/289480#M76991 Stevenjwilliams83 2019-09-22T16:32:44Z https://live.paloaltonetworks.com/t5/general-topics/dynamic-dns-and-an-ssl-cert/m-p/289560#M76999 <P>FYI:</P><P><A href="https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/networking-features/dynamic-dns-nfg.html" target="_blank">https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/networking-features/dynamic-dns-nfg.html</A></P><P>For the SSL cert portion, you need to create a CSR that should contain <SPAN>FQDN of your GP gateway (this will be resolved to the IP of your external PA interface by the DDNS):</SPAN></P><P><SPAN><A href="https://www.globalsign.com/en/blog/what-is-a-certificate-signing-request-csr/" target="_blank">https://www.globalsign.com/en/blog/what-is-a-certificate-signing-request-csr/</A></SPAN></P> Mon, 23 Sep 2019 14:11:22 GMT https://live.paloaltonetworks.com/t5/general-topics/dynamic-dns-and-an-ssl-cert/m-p/289560#M76999 myky 2019-09-23T14:11:22Z