NETGEAR UTM5EW-100NAS, STM150EW-100NAS manual Manage the Active Https Certificate, 232

ProSecure Unified Threat Management (UTM) Appliance

recommends that you replace this digital certificate with a digital certificate from a well-known commercial certification authority (CA) such as an internal Windows server or an external organization such as VeriSign or Thawte. Because a commercial CA takes steps to verify the identity of an applicant, a digital certificate from a commercial CA provides a strong assurance of the server’s identity. On the UTM, the uploaded digital certificate is checked for validity and purpose. The digital certificate is accepted when it passes the validity test and the purpose matches its use.

To display the Certificate Management screen, select Web Security > Certificate Management. Because of the size of this screen, and because of the way the information is presented, the Certificate Management screen is divided and presented in this manual in three figures (the following figure, Figure 128 on page 233, and Figure 129 on page 234).

The UTM’s Certificate Management screen lets you view the currently loaded digital certificate for HTTPS scans, upload a new digital certificate, manage the trusted CA authorities list, and manage the untrusted certificates list.

Manage the Active HTTPS Certificate

To manage the UTM’s active certificate that is used for HTTPS scans, select Application Security > SSL Settings > Certificate Management. The Certificate Management screen displays. The following figure shows only the Certificate Used for SSL Scans section of the screen:

Figure 127. Certificate management, screen 1 of 3

The top part of the Certificate Used for SSL Scans section displays information about the current certificate that is used for SSL scans.

Content Filtering and Optimizing Scans

232