DV SSL or OV SSL or EV SSL

Amara

We have USG210. Does USG210 accept DV SSL (Domain Validation SSL) as an SSL certificate?

Or it only accepts OV SSL (Organization Validation SSL) or EV SSL (Extended Validation SSL)?

Please advise.

Zyxel_Cooldia

Hi @Amara,
Regarding to your questions, DV, OV, or EV certificate type, it just a validation method by CA, any certificate must be verified by the issuing Certificate Authority (or CA) to ensure that it is covering the correct, authorized site. USG can import these type certificate.

Amara

May I know where do we import the certificate in the USG?

Zyxel_Cooldia

HI @Amara,
The menu path is on “Configuration > Object > Certificate”. There are two tabs in this page, one is “My Certificates”, another is “Trusted Certificates”.
To import a certificate into USG, two certificates are required. The first one is called the ROOT certificate, and it confirms the identity of the authority certificate organization,
the second certificate is purchased by the customer. You have to import both certificate to USG.

Amara

ok thanks.
Using USG210, any idea why when we are accessing our supplier SSL website,  it will give an error? When we disabled the firewall, everything is fine. Can advise?

Zyxel_Cooldia

Hi @Amara,
What kind of errors? Do you apply SSL inspection on security policy rule? or any UTM profile apply on the security rule?

Amara

it is CA error

Zyxel_Cooldia

Hi Amara,
Do you apply SSL inspection on security policy rule? or any UTM profile apply on the security rule?