topic Re: Is there a way to use Panorama to send certificates to managed devices? in General Topics

Is there a way to use Panorama to send certificates to managed devices?

ccfritz — Fri, 19 Jun 2020 03:19:40 GMT

Instead of manually installing certificates from a certificate authority on each managed device under Panorama, is it possible to push certs from Panorama? Thank you.

Re: Is there a way to use Panorama to send certificates to managed devices?

MP18 — Fri, 19 Jun 2020 03:38:53 GMT

It depends how many firewalls you have which are managed by the Panorama?

As each Firewall has unique name Common Name which is IP address or FQDN.

In our environment we have created certs on each individual firewall.

You can push from the panorama by creating something like wildcard certificate like

*.domain.com and push to each firewall with same common name *.domain.com and al other attributes.

I have not seen anyone doing this way so far.

Re: Is there a way to use Panorama to send certificates to managed devices?

ccfritz — Fri, 19 Jun 2020 15:41:28 GMT

Thank you, makes complete sense.