06-18-2020 08:19 PM
Instead of manually installing certificates from a certificate authority on each managed device under Panorama, is it possible to push certs from Panorama? Thank you.
06-18-2020 08:38 PM
It depends how many firewalls you have which are managed by the Panorama?
As each Firewall has unique name Common Name which is IP address or FQDN.
In our environment we have created certs on each individual firewall.
You can push from the panorama by creating something like wildcard certificate like
*.domain.com and push to each firewall with same common name *.domain.com and al other attributes.
I have not seen anyone doing this way so far.
06-18-2020 08:38 PM
It depends how many firewalls you have which are managed by the Panorama?
As each Firewall has unique name Common Name which is IP address or FQDN.
In our environment we have created certs on each individual firewall.
You can push from the panorama by creating something like wildcard certificate like
*.domain.com and push to each firewall with same common name *.domain.com and al other attributes.
I have not seen anyone doing this way so far.
06-19-2020 08:41 AM
Thank you, makes complete sense.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
