This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[Sophos Notification] Advisory: XG Firewall - SSL VPN remote client users are not able to connect due to 3rd party Root CA Sectigo expired

Hi Community, 

SSL VPN remote client users are not able to connect due to 3rd party Root CA Sectigo expired on May 30th, 2020. Please refer to the below link for workaround and more information. 



This thread was automatically locked due to age.
  • To fix the issue.

    1) Remove old certificates expired and intermediate you have installed when you have installed the certificate.

    2) Add "Root certificate" named "COMODORSADomainValidationSecureServerCA.crt". You find it in the Comodo package of your certificate.

    3) Delete all user's certificates.

    4) After every user must login on user portal and download again the configuration.

    5) Close running Sophos VPN SSL client or OpenVPN and import configuration.

    That's all.

    Walter Russo