Summary of Create an Active Directory Certificate for Content Inspection

00:00:00 - 00:10:00

This video explains how to create an Active Directory certificate for content inspection using a local PKI. The process is relatively straightforward and only requires a few steps. This certificate will be trusted by client devices and will allow for outbound content inspection.

• 00:00:00 In this video, the author explains how to create an Active Directory certificate for content inspection using a local PKI. The first thing covered are the requirements for the proxy authority certificate, and then the advantages of using a local certificate instead of the default proxy authority certificate on the Firebox. The default certificate on the Firebox is not trusted by any client devices, and there are two options for resolving this: using a local CA like Active Directory, or using the Firebox's Csr Wizard to get the certificate signed by Active Directory.
• 00:05:00 The csr wizard is straightforward; in this case, the user will be using the proxy authority option for outbound content inspection. The required fields will be filled out, and the subject name will be given a domain name. The ip address will not be necessary, and the rsa 2048 bit option will be left unchecked. The admin passphrase will be written to the fireback. The csr will be copied and then input into the ca software. The ca certificate will be generated instantaneously, and the name will be renamed to "ad root ca." The csr will be imported into the fsm certificate window. The root certificate will be searched for, and if found, it will be imported and the common name will be listed. If there are any other intermediates, they will be requested. The ca certificate will be downloaded and then renamed to "ad root ca." The csr wizard will be closed.
• 00:10:00 This video shows how to create an Active Directory Certificate for Content Inspection. First, change the file type to a PKCS12 file. Next, import the certificate into the Firebox. Finally, replace the default certificate on the Firebox with the newly imported certificate.