TLS Certificate Handling in Cluster Mode

[mikealong]

I have two Ironport C370 in a cluster.  When I setup the inbound/outbound mail settings this is done in cluster mode and only lets me associate one cerfiticate to the configuration.  When a session hits the machine that doesn't match the certificate name they get a error unable to validate host name.  Is it possible to set this outside of cluster mode then re-enable?  We are currently on AsyncOS version 8.0.0 build 671.

Thanks,

Mike

[David Miller]

Hi Mike,

You might find this KB entry #1765 answers your question.

https://ironport.custhelp.com/app/answers/detail/a_id/1765

Basically you have to go into machine mode for each appliance but ensure you use the same certificate profile name.