Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 9 replies
  • Subscribers 40 subscribers
  • Views 1186 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL ISSUE

Hesham Mahmoud1

Hello all ,

When i open my Sophos firewall admin console web page i got certificate invalid so i looked at the chain which i received

and i found that it is contained of two certificates first is a self sign root certificate ( Default ) and second is the appliance certificate which

is singed be the first certificate ( Default ) due to that i export the root certificate and add it to my trusted CA in the chrome browser

but it doesn't work as i expected i am still got certificate invalid when i open the firewall web console page 

so can anyone explain that to me .

 

Thanks 



This thread was automatically locked due to age.
Parents Reply
  • +1 in reply to Hesham Mahmoud1

    Hi,

    Use the device name in the CA to create a FQDN using the internal address and do not tick advertise on the internet box.

    The above screenshot is from the Network -> DNS tab.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Children
  • 0 in reply to rfcat_vk

    Thank you very much the ip address is causing this problem because i forget to use the CN instead of the ip address when i use the CN it working fine 

    but without adding FQDN because the firewall is already can mapping the name of the device to the public ip address .

  • 0 in reply to Hesham Mahmoud1

    Hi,

    the reason not to use the external address is you have to enable external access to your firewall which is something you should try to avoid and unless yo u have a static external IP address if your link fails you cannot connect to your XG. This is based on my experiences.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Unfiltered HTML