Sophos Central Intercept X HTTPS Web control

Question

Hi, 
 we have a little Problem with the new Sophos Central Intercept X. If a website (https) gets blocked, we only receive a error message from the browser. When we try to access a website over http we get an error message from Sophos direct. 
 Is there a possibllity to get an error message from Sophos over https? Maybe SSL Inspection, Root CA? 
 Thank you in Advance!

Sophos User930 · Accepted Answer

The current version displays messages in the browser for HTTP sites, e.g. Blocked, Warn, etc.. 
 For HTTPS sites, no "in browser" message is displayed as the endpoint doesn't do inspection of encrypted traffic it just uses the Server Name Indicator (SNI) value of the handshake establishment to obtain the domain for lookup purposes. 
 The version which is coming to EAP soon does full inspection at the endpoint and can perform in browser messaging. 
 Information on that that is covered here: 
 Important Changes to the Endpoint/Server Protection and EDR Features Early Access Program - Announcements - Endpoint EAP - Sophos Community 
 Thanks!

Sophos Central Intercept X HTTPS Web control

Top Replies