GlobalProtect Portals - Satellite OCSP Responder - Interpreting BPA Checks - Network
This video covers the importance of endpoints certificates and the GlobalProtect Satellite OCSP Responder.
Clients can use the Online Certification Status Protocol (OCSP) to check the revocation status of the authentication certificate that endpoints present to GlobalProtect portals. The GlobalProtect Satellite OCSP Responder best practice check ensures a satellite OCSP responder is enabled.
For more information about Satellite OCSP Responder, please review the following articles:
Online Certificate Status Protocol (OCSP) (TechDocs - PAN-OS® Administrator’s Guide)
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/certificate-management/certificate-revocation/online-certificate-status-protocol-ocsp
GlobalProtect Portal Satellite Configuration Tab (TechDocs - PAN-OS® Web Interface Reference)
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-satellite-configuration-tab
Configure an OCSP Responder (TechDocs - PAN-OS® Administrator’s Guide)
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/certificate-management/set-up-verification-for-certificate-revocation-status/configure-an-ocsp-responder.html
Comments
Post a Comment