Audit log certificates

An audit log certificate is a security credential that

secures communications between the Cloud-Delivered Firewall Management Center and a trusted audit log server,
enables authentication and encryption using Transport Layer Security (TLS), and
supports mutual authentication and certificate revocation checks for enhanced security.

Client certificates

Client certificates are required to secure communications between the Cloud-Delivered Firewall Management Center and the audit log server.

Generate a certificate signing request (CSR). Submit it to a Certificate Authority (CA) for signing. Import the signed certificate onto the Cloud-Delivered Firewall Management Center.
Use the local system configuration: Obtain a signed audit log client certificate for the Cloud-Delivered Firewall Management Center and Import an audit log client certificate into the Cloud-Delivered Firewall Management Center.

Server certificates

Server certificates are optional and provide additional security through mutual authentication.

Require mutual authentication between the Cloud-Delivered Firewall Management Center and the audit log server by loading one or more certificate revocation lists (CRLs).
You cannot stream audit logs to servers with revoked certificates listed in those CRLs.
Secure Firewall supports CRLs encoded in Distinguished Encoding Rules (DER) format. These are the same CRLs used to validate HTTPS client certificates for the Cloud-Delivered Firewall Management Center web interface.
Use the local system configuration: Require valid audit log server certificates.

Audit log certificate example

For example, a signed client certificate imported onto the Cloud-Delivered Firewall Management Center enables secure TLS communication with an audit log server, ensuring log integrity and confidentiality.

Non-compliant audit log certificate

A certificate that is not signed by a trusted Certificate Authority or is listed in a certificate revocation list (CRL) cannot be used to stream audit logs securely.

Audit log certificate analogy

An audit log certificate is like a passport for secure communication, verifying identity and granting access between the management center and the audit log server.