Source note · Setting up certificates on Cisco Expressway

With TLS verify enabled on a zone, the neighbor's FQDN or IP address is checked against the certificate holder name, so zone peer addresses should be FQDNs when certificates carry peer or cluster FQDNs.

Checked 2026-09-30

Vendor: Cisco
Product: Cisco Expressway
Subsystem: tls
Deployment: on-premises
Region: not restricted
Release range: X15.5
Checked: 2026-09-30

Sources

Cisco Expressway Certificate Creation and Use Deployment Guide (X15.5) - Troubleshooting — Cisco Systems · tier 2 current vendor documentation · Troubleshooting > SIP TLS negotiation failures on neighbor zones

Cite this note

APA

WarmTransfer. (2026, September 30). Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-zone-verify-fqdn. WarmTransfer. https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-zone-verify-fqdn

BibTeX

@misc{warmtransfer-claim-expressway-certificate-setup-zone-verify-fqdn,
  title  = {Setting up certificates on Cisco Expressway: source note expressway-certificate-setup-zone-verify-fqdn},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/expressway-certificate-setup-zone-verify-fqdn},
  note   = {Source note expressway-certificate-setup-zone-verify-fqdn, checked 2026-09-30}
}

Read in context