Enpoint - Threat Detection - SSL inspection active - invalid date

And the KB Advisory: Endpoints fail to decrypt root certificate after a reboot (sophos.com)

this worked for us

We're having issues even though it's disabled in policy, particularly for devices on wifi and not our wired network.  Disabling in the threat protection policy and rebooting the device doesn't resolve the issue in these cases

It could just be a timing issue - policy has to have time to refresh after changing it in Central. The knowledgebase article has been updated to reflect this.

It could just be a timing issue - policy has to have time to refresh after changing it in Central. The knowledgebase article has been updated to reflect this.

Early Friday morning I turned SSL/TLS decryption back on in Central - an hour or so later clients started reporting the issue. I updated their endpoints but it made no difference, so SSL/TLS is off again.

This reminds me of the expired intermediate certificate issue in 2020. Different issue - same lack of attention to detail.