Configuring OCSP

[sgoethals]

I am trying to configure OCSP and I am a little confused.

I have added an OSCP responder. 

It appears the second step is to allow the Firewall to use it by configuring Device-Management->Interfaces.  However, for most of my settings, I am using a Service Route Configuration  and I don't see HTTP OCSP listed as an option in Service Route.  Is there a way to tell the firewall to use a service route instead of the management interface?

I also see references online (albeit old) that indicates I need to turn on HTTP OCSP for an Interface Management Profile that is used for a specific interface.  If this is the case, what interface should be used?

Could someone provide me with some guidance?  

Thanks,

[gwesson · Accepted solution]

If your OCSP responder IP  is your management IP address, then you need to configure that for HTTP OCSP:

If you're using a service route (a dataplane interface) instead, you'll need to enable HTTP OCSP as an interface profile instead, and assign that profile to the appropriate interface:

[sgoethals]

Thanks for the information.  I appreciate it.