Hi, I take SSL_ERROR_BAD_MAC_READ error while trying to enter web console page as https:// x.x.x.x:4444/webconsole I did below steps but the same error apears again. what should I do another thing ? I use avast av in my network. I disabled HTTPS scanning also. I installed the SecurityAppliance_SSL_CA to firefox I installed the SecurityAppliance_SSL_CA to windows trusted CA path .

Hi @Süleyman Akpinar Thanks for contacting the Community support forum. Please review this KB article and it will help you. Please note that you will need to import the XG CA. https://community.sophos.com/kb/en-us/127287 Thanks!

Hi Is this Opera on a PC? If so, then you will need to install the CA into the trusted root authorities in the browser. There are a few instructions on the web on how to do this.

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Browsers (Opera,Firefox,edge ) dont see the SecurityAppliance_SSL_CA as trusted CA

Süleyman Akpınar over 4 years ago

Hi,

I take SSL_ERROR_BAD_MAC_READ error while trying to enter web console page as https://x.x.x.x:4444/webconsole

I did below steps but the same error apears again. what should I do another thing ?

I use avast av in my network. I disabled HTTPS scanning also.
I installed the SecurityAppliance_SSL_CA to firefox
I installed the SecurityAppliance_SSL_CA to windows trusted CA path .

This thread was automatically locked due to age.

Parents

0 KingChris over 4 years ago

Hi @Süleyman Akpinar

Thanks for contacting the Community support forum.

Please review this KB article and it will help you. Please note that you will need to import the XG CA.

https://community.sophos.com/kb/en-us/127287

Thanks!

KingChris
Community Support | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 Süleyman Akpınar over 4 years ago in reply to KingChris

Hi,

Thanks for your answer. I did all steps but I saw same bad result :(
Cancel
Vote Up 0 Vote Down

Cancel
0 KingChris over 4 years ago in reply to Süleyman Akpınar

It looks like you are using firefox. Please note that firefox uses its own cert container and does not rely on the 1 provided by the OS. You will need to import the CA used to create the self-signed certificate into Firefox SSL container.

I also noticed that you are trying to go to 176 address but the IP address on admin page is 172. Please ensure you have that 176 IP address set correctly on the interface.

Please could you also DM me a screenshot of the certificate's properties.

Thanks!

KingChris
Community Support | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 KingChris over 4 years ago in reply to Süleyman Akpınar

It looks like you are using firefox. Please note that firefox uses its own cert container and does not rely on the 1 provided by the OS. You will need to import the CA used to create the self-signed certificate into Firefox SSL container.

I also noticed that you are trying to go to 176 address but the IP address on admin page is 172. Please ensure you have that 176 IP address set correctly on the interface.

Please could you also DM me a screenshot of the certificate's properties.

Thanks!

KingChris
Community Support | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Süleyman Akpınar over 4 years ago in reply to KingChris

Hi,

I restarted the pc and see that I connected as secure on the mozilla.

I created the the cert for 176.xx.yy.zz ( our ext İP ) , not for 172.16.16.16

But ont he opera the problem continoues. Does it need to install cert on the opera cert cont. also ?
Cancel
Vote Up 0 Vote Down

Cancel
0 KingChris over 4 years ago in reply to Süleyman Akpınar

Hi

Is this Opera on a PC? If so, then you will need to install the CA into the trusted root authorities in the browser.

There are a few instructions on the web on how to do this.

KingChris
Community Support | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel