Configuring OCSP

L2 Linker

Configuring OCSP

I am trying to configure OCSP and I am a little confused.

 

I have added an OSCP responder. 

 

It appears the second step is to allow the Firewall to use it by configuring Device-Management->Interfaces.  However, for most of my settings, I am using a Service Route Configuration  and I don't see HTTP OCSP listed as an option in Service Route.  Is there a way to tell the firewall to use a service route instead of the management interface?

 

I also see references online (albeit old) that indicates I need to turn on HTTP OCSP for an Interface Management Profile that is used for a specific interface.  If this is the case, what interface should be used?

 

Could someone provide me with some guidance?  

 

Thanks,

L7 Applicator

Re: Configuring OCSP

If your OCSP responder IP  is your management IP address, then you need to configure that for HTTP OCSP:

 

http-ocsp.png

 

If you're using a service route (a dataplane interface) instead, you'll need to enable HTTP OCSP as an interface profile instead, and assign that profile to the appropriate interface:

 

ocsp-interface.png

L2 Linker

Re: Configuring OCSP

Thanks for the information.  I appreciate it.

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!