Certificate Management Features

Learn about new certificate management features in PAN-OS 11.0, including support for OCSP over HTTP proxies.
Certificate Management Features
Support for OCSP Verification through HTTP Proxy
If your network deployment includes a web proxy, you can now use the Online Certificate Status Protocol (OCSP) to check the validity of SSL/TLS certificates. The firewall forwards OCSP requests to your proxy server instead of directly to the OCSP responder. You'll need to configure an OCSP responder and specify OCSP as your certificate revocation status method.

Recommended For You