This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

firefox error accessing the web with ssl inspection enable

I have ssl inspection in intercept x advanced with xdr/

I have a problem surfing with firefox.

the message is:

Software is Preventing Firefox From Safely Connecting to This Site

mxtoolbox.com is most likely a safe site, but a secure connection could not be established. This issue is caused by Sophos Endpoint RSA Root, which is either software on your computer or your network.

I disabled the dns over https in the firefox, also disabled the https only web access.

I have this problem with all the account that the ssl inspection is enabled and using firefox.

Any idea why?

Than'x

Shay

This thread was automatically locked due to age.

Top Replies

LHerzog 10 months ago in reply to Qoosh +1

please enable this in firefox: security.enterprise_roots.enabled true Sophos EP uses it's own Root certificate for MIM interception. I don't know if Sophos pushes the EP Root CA into…

Parents

0 Qoosh 10 months ago

Hi Shay,

Thanks for reaching out to the Sophos Community Forum.

May I ask if the device in question is a Windows or Mac device? Could you also let me know what version is displayed when checking the "About" section of the Sophos Endpoint UI?

If you are using the EAP for Mac devices, our development team may want your feedback. Just let me know, and I'll help move this post over to our EAP forum for Macs.

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog 10 months ago in reply to Qoosh

please enable this in firefox:

security.enterprise_roots.enabled true

Sophos EP uses it's own Root certificate for MIM interception. I don't know if Sophos pushes the EP Root CA into the Firefox Cert store? But it pushes the certificate into the cert store of windows.

Qoosh can you confirm if it does or not?
Cancel
Vote Up +1 Vote Down

Cancel
+1 Qoosh 10 months ago in reply to LHerzog

Thank you for mentioning this. Additional information on this setting can also be found on the following page.
- Firefox and decryption

I am not aware of any immediate plans to push Sophos' certificate into the Firefox Cert store, but I will inquire internally and update you on whether this may be implemented in later versions.

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up +1 Vote Down

Cancel
0 Shay Hanya 10 months ago in reply to Qoosh

Hi

It seemed that article Firefox and decryption solved the problem.

Thank You

I'm waiting for the customer to check.
Cancel
Vote Up 0 Vote Down

Cancel

security.enterprise_roots.enabled	true

Reply

0 Shay Hanya 10 months ago in reply to Qoosh

Hi

It seemed that article Firefox and decryption solved the problem.

Thank You

I'm waiting for the customer to check.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data