SSL inbound inspection question

Reply
L1 Bithead

SSL inbound inspection question

Hello,
I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed.

I think PAN support only one Decryption rule for public IP.

 

It's possible to have multiple SSL certificate for same public ip address and multiple decryption rule for same ip ?

 

Tnx

L7 Applicator

Hi there

 

you could add custom url categories to the destination to differentiate between the 2 hostnames:

 

2015-09-11_14-34-56.png

 

regards

Tom

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
L1 Bithead

Hello Tom,
I try, but commit failed :(

Carlo

L7 Applicator

Hi Carlo

 

Could you confirm what the error message is during the commit ?

I've reproduced this in my lab but was able to commit

 

thanks!

Tom

Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!