NETGEAR UTM5 Reference Manual page 219

ProSecure Unified Threat Management (UTM) Appliance
Figure 121.
The UTM contains a self-signed certificate from NETGEAR. This certificate can be
downloaded from the UTM login screen or from the Certificate Management screen for
browser import. However, before you deploy the UTM in your network, NETGEAR
recommends that you replace this digital certificate with a digital certificate from a well-known
commercial certification authority (CA) such as an internal Windows server or an external
organization such as Verisign or Thawte. Because a commercial CA takes steps to verify the
identity of an applicant, a digital certificate from a commercial CA provides a strong
assurance of the server's identity. On the UTM, the uploaded digital certificate is checked for
validity and purpose. The digital certificate is accepted when it passes the validity test and
the purpose matches its use.
To display the Certificate Management screen, select Web Security > Certificate
Management. Because of the size of this screen, and because of the way the information is
presented, the Certificate Management screen is divided and presented in this manual in
three figures (the following figure, Figure 123 on page 221, and Figure 124 on page 222).
The UTM's Certificate Management screen lets you view the currently loaded digital
certificate for HTTPS scans, upload a new digital certificate, manage the trusted CA
authorities list, and manage the untrusted certificates list.
Manage the Active HTTPS Certificate
To manage the UTM's active certificate that is used for HTTPS scans, select Application
Security > SSL Settings > Certificate Management. The Certificate Management screen
displays. The following figure shows only the Certificate Used for SSL Scans section of the
screen:
Content Filtering and Optimizing Scans
219