Re: [AFMUG] Favorite https: cert implementation for managed gear

[George Skorup]

HTTPS is the least of my concerns for on-net gear. If I'm remote, it's 
over an IPsec VPN to the NOC. And the other reasons stated for HTTPS 
management on devices with self-signed certs, screw that.

On 10/18/2017 8:35 PM, Seth Mattinen wrote:
On 10/18/17 5:36 PM, Steve Jones wrote:
talking to the world is zero issue if you limit the world talking to 
them


I do both ways, no traffic out and no traffic in unless it's to/from a 
subnet.