I am trying to configure OCSP and I am a little confused.
I have added an OSCP responder.
It appears the second step is to allow the Firewall to use it by configuring Device-Management->Interfaces. However, for most of my settings, I am using a Service Route Configuration and I don't see HTTP OCSP listed as an option in Service Route. Is there a way to tell the firewall to use a service route instead of the management interface?
I also see references online (albeit old) that indicates I need to turn on HTTP OCSP for an Interface Management Profile that is used for a specific interface. If this is the case, what interface should be used?
Could someone provide me with some guidance?
Solved! Go to Solution.
If your OCSP responder IP is your management IP address, then you need to configure that for HTTP OCSP:
If you're using a service route (a dataplane interface) instead, you'll need to enable HTTP OCSP as an interface profile instead, and assign that profile to the appropriate interface:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!