How To Configure A Certificate For Secure PAN-OS Web GUI Access

How To Configure A Certificate For Secure PAN-OS Web GUI Access
***Check out my new blog*** - www.mbtechtalker.com
Watch these videos first!!
🎥 How to Install Microsoft Certificate Services - • How to Install Microso...
🎥. Palo Alto firewall lab using VMware Workstation - • Palo Alto firewall lab...
🎥. How to configure Palo Alto Firewall Signature Based Security Profiles in PAN-OS 9.1- • Palo Alto Firewall Sig...
🎥. Palo Alto Firewall Active-Passive HA VMware Workstation Lab- • Palo Alto Firewall Act...
🎥. User-ID - • Palo Alto Firewall Win...
🎥 SSL Forward Proxy decryption - • Palo Alto NGFW SSL For...
Subscribe for more:
• How to configure DNS S...
Share this video with a friend:
• How To Configure A Cer...
Watch next
🎥. How to configure Palo Alto Firewall Signature Based Security Profiles in PAN-OS 9.1 - • Palo Alto Firewall Sig...
🐦 Twitter - @mbtechtalker
🌐. Blog - www.mbtechtalker.com
☕. buymeacoffee.com/mbtechtalker

[@ryand7242]

I just strugglebussed trying to get this to work for hours. Your video got it done in 15 mins. thanks man.

[@jeffhorton4960]

Excellent instructions for creating the certificate.

[@bigbos779]

Just found your channel and already subscribe :)
Almost of your video are very helpful. Thanks

[@jong1796]

Thanks, very helpful. Will this works for active/passive . Do I need to generate CSR from both PA's ?

[@mohammadgpour1409]

it was a very helpful video

[@fidisiledif]

If I have HA Palo Alto , how to set secure access Web GUI using self sign SSL ?
Since I try still not solved

[@hrvatska-U-srcu]

nice one!

[@MBTechTalker]

Thank you!

[@FaridPangos]

What about if you wan to manage the firewall through the non-management interfaces ? like ethernert1/1. how do you attach the ssl service profile to the non-management interface?

[@skra11]

The IP address of the management interface will be different than the routed interface. You can probably use subject alternative name in the same cert to include other interfaces.

[@Steelingz]

I worked out your configuration, but after refreshing my browser i get another certificate error: ERR_CERTIFICATE_AUTH_INVALID. Even tho i have imported the certificate into my browser aswell. I guess it's because I have no Root CA but I have no clue how I can set that up

[@Steelingz]

I managed to get the ROOT CA on my firewall and the connection is secure, but I cannot surf to my DNS server (hostname or hostname + domain)
Does your firewall have to be in the same domain as your CA server (Windows Server) ?