Hi all,
I ran a vulnerability scan on my Palo Alto this afternoon, and I am receiving the following vulnerability:
I am a little confused as to why I am receiving it since I have one TLS/SSL Service Profile (using TLSv1.2 strictly) that is setup to use a signed certificate from 3rd party CA. Moreover, I cannot find that certificate listed in the vulnerability anywhere on the firewall (the EMAILADDRESS=support@paloaltonetworks.com, CN=localhost, OU=Support, O=Palo Alto Networks, L=Sunnyvale, ST=CA, C=US). The only thing I am thinking is that I do have a self-signed certificate that I use to administer to my GlobalProtect satellites.
Any ideas on how I could patch this? Any tips or advice is much appreciated.
Hi
that certificate is the self-signed certificate factory loaded onto the device pending replacement by a public certificate
did you scan your management interface or a dataplane interface with a management profile (this is the most common spot for you to encounter this certificate)
did you set the ssl/tls profile in the management configuration ?
Hi
that certificate is the self-signed certificate factory loaded onto the device pending replacement by a public certificate
did you scan your management interface or a dataplane interface with a management profile (this is the most common spot for you to encounter this certificate)
did you set the ssl/tls profile in the management configuration ?
