Certificates for DPI

We are looking to enable DPI on all of our firewalls. I have about 15 firewalls in total. I also have a local Enterporise CA which i am going to use for the certs. When it comes to creating the certificates for the dpi for outbound traffic do I have to create a certificate for each firewall or can I create one certificate and import that into all of my firewalls. Id much rather manage one cert than 15 individual ones if possible.


  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @SunsetFett
    You can use one cert across all of the firewalls if you wish. The firewall labels it as the "Proxy Authority" certificate.

    As an aside, WatchGuard doesn't use the term "DPI," as it's technically trademarked. You'll always see it referred to as "content inspection" in our documentation.

    -James Carson
    WatchGuard Customer Support

  • Options

    Hi @james.carson , Awesome thank you for the info. I think we'll look into using one cert then. I apprciate it! Good to know about DPI, i had now idea it was trademarked :)

Sign In to comment.