This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using the same HTTPS Scanning CA on multiple XG Firewalls

We have a customer that is planning to deploy multiple XG Firewalls in multiple sites and I was wondering is it possible to make them all use the same CA for HTTPS Decryption and Scanning so that roaming users don't have to install multiple certificates?

This thread was automatically locked due to age.

Parents

0 Tam Ben-Jusu over 6 years ago

Apologies, I believe you have to generate a self-signed certificate on each XG.

Certificates > Certificates > Add > Generate self-signed certificate

So, technically the certificate doing the encryption on each XG is different.

But the RootCertificate.pem that the clients need to install, and create the trust, is the same.

I'm a bit new to this myself so happy to be corrected if wrong.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 6 years ago in reply to Tam Ben-Jusu

Hi,

should be possible.

https://community.sophos.com/kb/en-us/123003

Use an external HTTPs CA and upload it to each XG.

Cheers

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 6 years ago in reply to Tam Ben-Jusu

Hi,

should be possible.

https://community.sophos.com/kb/en-us/123003

Use an external HTTPs CA and upload it to each XG.

Cheers

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 LuCar Toni over 6 years ago in reply to LuCar Toni

Would like to suggest this as a solution.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 AhmedMaher over 6 years ago in reply to LuCar Toni

How do I achieve this if I don't have Certificate Infrastructure?

Is it possible to copy the CA from one XG and upload to the other XG?
Cancel
Vote Up 0 Vote Down

Cancel