Device > Certificate Management > OCSP Responder

Enable communication between the firewall and the OCSP server: select
Device
Setup
Management
, select
HTTP OCSP
in Management Interface Settings, and then click
OK
.
If the firewall will decrypt outbound SSL/TLS traffic, optionally configure it to verify the revocation status of destination server certificates: select
Device
Setup
Sessions
, click
Decryption Certificate Revocation Settings
, select
Enable
in the OCSP settings, enter the
Receive Timeout
(the interval after which the firewall stops waiting for an OCSP response), and then click
OK
.
Optionally, to configure the firewall as an OCSP responder, add an Interface Management profile to the interface used for OCSP services. First, select
Network
Network Profiles
Interface Mgmt
, click
Add
, select
HTTP OCSP
, and then click
OK
. Second, select
Network
Interfaces
, click the name of the interface that the firewall will use for OCSP services, select
Advanced
Other info
, select the Interface Management profile you configured, and then click
OK
and
Commit
.