Enable Reverse Proxy Access for Older Devices

This procedure enables reverse proxy access to older devices (TE, NE, VFS, VFS10G, GT/LT/GX 7.2 and earlier) from Sensor Management 25.7 or later on a non‑FIPS system. These devices require manual certificate configuration because their certificates are not compatible with the current trusted certificate import process.

Before You Begin

• Sensor Management services are running.
• You have CLI access to Sensor Management.
• You have access to the older device to generate a new certificate.

Procedure

1. Enable TLS 1.0 on Sensor Management to allow communication with the older device.

   Run the following command in the Sensor Management CLI:

   sm-cli: tls enable version TLSv1
   

   See TLS configuration in the Sensor Management CLI Reference (Docker).

2. Generate a new certificate on the older device.

   The existing device certificate may be expired. Refer to your device documentation for instructions on generating a new certificate.

3. Import the device certificate as a trusted certificate.

   Copy the certificate file to the Sensor Management data directory, then run:

   sm-cli: certificate import trusted-file <device_cert_file>
   

   See Import a Trusted Certificate in the Sensor Management CLI Reference (Docker).

4. Restart Sensor Management services to apply the configuration.

   sm-cli: services start
   

5. Access the older device through reverse proxy.

Verify the Connection

After completing the procedure, verify that reverse proxy access works.

If the connection fails, verify that the certificate was imported correctly by running certificate show trusted-cert-file alias <alias> in the Sensor Management CLI.