topic SSL inspection certificate outbound - validity 398 days in Firewall and Security Management

SSL inspection certificate outbound - validity 398 days

chico — Mon, 15 Feb 2021 13:34:49 GMT

Hello everybody,

I'm looking for renew my SSL inpsection certificate and I don't know the validity periode to set. before it was 4 years but wiht the apple annonce that the TLS server certificates issued on or after September1, 2020 must not have a validity period greater than 298 days, I d'ont know if I need to set a validity period of 1 year, otherwise the certificate will be not trusted right ?

If someone can help me

Regards,

miguel

Re: SSL inspection certificate outbound - validity 398 days

the_rock — Mon, 15 Feb 2021 14:10:17 GMT

Let me tell you what we did for a customer with bunch of mac computers. After countless hours on the phone with TAC and no one really having a clear idea, we opted to use identity agent for mac and this works perfect. Agent authenticates to firewall, then to AD in turn. Cert is valid for 10 years and works fine on ALL browsers on mac. If you like, I can help you on remote session offline.

Andy