Alto BEXT 100H Betriebsanweisung Seite 20
- Seite / 178
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
14 GlobalProtect Administrator’s Guide
Enable SSL Between GlobalProtect Components Set Up the GlobalProtect Infrastructure
• Generate a self-signed server certificate.
Use the root CA on the portal to generate
server certificates for each gateway you
plan to deploy and optionally for the
Mobile Security Manager management
interface (if this is the interface the
gateways will use to retrieve HIP reports).
In the gateway server certificates, the values
in the Common Name (CN) and Subject
Alternative Name (SAN) fields of the
certificate must be identical or the
GlobalProtect agent will detect the
mismatch when it checks the certificate
chain of trust and will not trust the
certificate. Self-signed certificates will only
contain a SAN field if you add a Host
Name certificate attribute.
1. Select
Device > Certificate Management > Certificates >
Device Certificates
and then click Generate.
2. Enter a
Certificate Name. The Certificate Name cannot contain
any spaces.
3. Enter the FQDN (recommended) or IP address of the interface
where you plan to configure the gateway in the
Common Name
field.
4. In the
Signed By field, select the GlobalProtect_CA you created
previously.
5. In the Certificate Attributes section, click
Add and define the
attributes to uniquely identify the gateway. Keep in mind that if
you add a
Host Name attribute (which populates the SAN field
of the certificate), it must exactly match the value you defined
for the
Common Name.
6. Click
OK to generate the certificate.
7.
Commit your changes.
• Deploy the self-signed server certificates.
Best Practices:
• Export the self-signed server certificates
issued by the root CA on the portal and
import them onto the gateways.
• Be sure to issue a unique server certificate
for each gateway.
• When using self-signed certificates, you
must distribute the Root CA certificate to
the end clients in the portal client
configurations.
1. On the portal, select
Device > Certificate Management >
Certificates > Device Certificates
, select the gateway certificate
you want to deploy, and click
Export.
2. Select
Encrypted Private Key and Certificate (PKCS12) from
the
File Format drop-down.
3. Enter (and re-enter) a
Passphrase to encrypt the private key
and then click
OK to download the PKCS12 file to your
computer.
4. On the gateway, select
Device > Certificate Management >
Certificates > Device Certificates
and click Import.
5. Enter a
Certificate Name.
6. Enter the path and name to the
Certificate File you just
downloaded from the portal, or
Browse to find the file.
7. Select
Encrypted Private Key and Certificate (PKCS12) as the
File Format.
8. Enter the path and name to the PKCS12 file in the
Key File field
or
Browse to find it.
9. Enter and re-enter the
Passphrase you used to encrypt the
private key when you exported it from the portal and then click
OK to import the certificate and key.
10.
Commit the changes to the gateway.
Deploy SSL Server Certificates to the GlobalProtect Components (Continued)
- Palo Alto Networks 1
- Contact Information 2
- About this Guide 2
- Table of Contents 3
- GlobalProtect Overview 7
- GlobalProtect Portal 8
- GlobalProtect Gateways 8
- GlobalProtect Client 9
- Minimum PAN-OS Version 11
- About GlobalProtect Licenses 12
- Two-factor authentication 23
- RADIUS 24
- VPN (Certificate Profile) 25
- Enable Group Mapping 35
- Configure the Gateway 38
- Location field 38
- Name and Password 56
- Test the Agent Installation 57
- Set the Portal Name 59
- Customizable Agent Settings 60
- Security Manager 65
- Register the GP-100 Appliance 70
- Activate the Licenses 71
- Management 74
- Define Deployment Policies 86
- Collection of Device Data 87
- About User and Group Matching 87
- About HIP Matching 88
- About HIP Notification 88
- Create a default 89
- Create Configuration Profiles 95
- Import Web Clip Icons 96
- Set Up a SCEP Configuration 105
- Create Deployment Policies 107
- Manage Mobile Devices 121
- Manually Tag Devices 122
- Pre-Tag Devices 123
- Imported 124
- Monitor Mobile Devices 125
- Monitor > 126
- Logs > MDM 126
- Administer Remote Devices 129
- (last-checkin-time 130
- Remove Devices 131
- Enforcement 132
- Commit the changes on 133
- About Host Information 136
- GlobalProtect Quick Configs 149
- Always On VPN Configuration 160
- —ethernet1/2 168
- —198.51.100.42 168
Sony KD-55X9005A manuali
Manuali dei proprietari e guide per l'utente per no Sony KD-55X9005A.
We fornisce 1 manuali pdf Sony KD-55X9005A per scaricare gratuitamente in base al tipo di documento: Manuale Utente
Kommentare zu diesen Handbüchern