Request forward trust issuer certificates from Next-Gen Trust Security and apply them
to the firewall locations that decrypt outbound traffic.
| Where Can I Use This? | What Do I Need? |
Configure forward trust certificates so that Next-Gen Trust Security issues and
tracks the certificates your firewalls use to decrypt outbound traffic. Certificates
you request this way are generated centrally and delivered on the same configuration
push your firewalls already receive.
A forward trust issuer certificate sits underneath every decrypted session for every
user behind the firewall. When one expires, users get errors on every site, so
managing certificates centrally removes a common outage cause.
Complete the following steps to request issuer certificates for locations you choose,
apply them to your firewall decryption settings, and push the configuration to the
firewalls.