ASA Identity Certificate best practices

[kajumblies15]

Does anyone know what the best practices are for Identity certificates on the cisco ASA. 

Specifically if I cut a cert for Remote Access VPN is it ok to use that same cert for the management interface?

What is Cisco's recommendation here?

Thank You

[Rob Ingram · Accepted solution]

@kajumblies15 

In my opinion if the client computer trusts the certificate then you can use it for RAVPN and on the management interface. You should also  ensure is that you are using the strongest protocols TLS/DTLS 1.2 (so disable TLS 1.0 and 1.1) and ensure you are using the stongest crytpo algorithms.

[kajumblies15]

@Rob Ingram 

That makes sense to me. And absolutely on the strong protocols and crypto algorithms. 

Thank You so much!!