SSL Inbound Inspection for single server hosting multiple websites

JScottNaviH — Tue, 01 Sep 2020 22:49:11 GMT

We are looking to implement SSL Inbound Inspection for a single server.

However a different certificate is used, based on the website being accessed.

My theory for the solution:

1. Create a custom URL Category for each individual website.

2. Upload each website's certificate onto the Palo Alto

3. Create an individual decryption policy for each website. In it identify Destination (Address/Zone), URL Category (custom URL category created in step 1), and the certificate for the particular website.

Has anyone encountered this requirement? Any feedback on if this solution would work?

Re: SSL Inbound Inspection for single server hosting multiple websites

Abdul-Fattah — Wed, 02 Sep 2020 20:47:58 GMT

That would work.

topic SSL Inbound Inspection for single server hosting multiple websites in General Topics

SSL Inbound Inspection for single server hosting multiple websites

Re: SSL Inbound Inspection for single server hosting multiple websites