SSL inbound inspection question

[ctovazzi]

Hello,
I have PAN OS 6.0.10, I need to implement SSL inbound inspection, for my web server, but I have multiple SSL certificate for same public ip address. When I try to commit configuration, the commit failed.

I think PAN support only one Decryption rule for public IP.

It's possible to have multiple SSL certificate for same public ip address and multiple decryption rule for same ip ?

Tnx

[reaper]

Hi there

you could add custom url categories to the destination to differentiate between the 2 hostnames:

regards

Tom

[ctovazzi]

Hello Tom,
I try, but commit failed 😞

Carlo

[reaper]

Hi Carlo

Could you confirm what the error message is during the commit ?

I've reproduced this in my lab but was able to commit

thanks!

Tom