topic Self-Signed Certificate expiry warning in General Topics

Self-Signed Certificate expiry warning

Jatin.Singh — Wed, 10 Jun 2020 06:22:23 GMT

Our GlobalProtect VPN was using a self-signed certificate which got expired caused end users not being able to connect to the VPN.

This raises the question that what are the ways to get alerted for these sort of incidents. Is there any in-build mechanism on the firewall or the Panorama that we could use to get notified of the Certificate Expiry incident before happening?

Thanks

Model: PA5020

Re: Self-Signed Certificate expiry warning

kiwi — Wed, 10 Jun 2020 09:54:15 GMT

Hi @Jatin.Singh ,

No there is not.

There are several feature requests for something similar.

You might want to check with you local SE to have your vote added the FRs:

FR 5251 - Generate an alert when an imported cert is about to expire

FR 6069 - Alert on Pending Certificate Expiration
FR 7451 - Certificate Expiry Alerts

Cheers,

-Kiwi.

Re: Self-Signed Certificate expiry warning

Infrastructure_TBS — Mon, 25 Jan 2021 13:52:12 GMT

This is an urgent matter for us. Last Friday, our certificates expired, causing a major issue, since users couldn't connect to GlobalProtect due to the certificate being expired, as we use certificates for it. This feature should be added sooner rather than later.