How to refresh the SSL CA

Hi,

please edit the screenshot to remove your XG licence.

Ian

HI,

I am not clear "Edit the screenshot to remove your SX licence". I did not issue License on XG 125. Can you give more details how to remove the said license?

brgds

Liu Wei

If you look at your first post is contains your XG licence, please edit the screenshot to remove at least part of the licence details.

Ian

Hi there

In the ISSUED BY field, is the SOPHOS SSL CA_XXXXXXXX

that number is the serial number of your unit.

This is a DEVICE Certificate, not an external certificate, which is why Windows displays the message.

If you want a registered certificate, then you need to purchase one from a commercial certificate authority and install on your Sophos.

Regards

Gavin

Hi, Gavin,

Thanks for your post.

I add the mailbox to outlook without this alert before last month, This alert is generated in this month. So I am thinking of if the alert could be disabled or removed from Sophos.

brgds

Liu Wei

Hi, Gavin,

Thanks for your post.

I add the mailbox to outlook without this alert before last month, This alert is generated in this month. So I am thinking of if the alert could be disabled or removed from Sophos.

brgds

Liu Wei

Hi,

did you enable mail scanning in the XG?
ian

Hi, 

Sorry. The SG125 installed on remote site. Remote is not avaible to double check.

From the license, you could see the product have email protect license.

Brgds

Liu Wei

Hello

Do you have a firewall rule with email scanning.

Or if its V18 do you have a rule which has DPI scanning?

Regards

Hi wei liu,

You are getting the certificate warning most likely because you have email protection configured but did not upload the server certificate on the XG. 

Check out the following KBA for more info: Sophos Firewall: How to enable secure SMTP email communication using certificate authorities.

Thanks,

Sorry, I update late due to remote the site is not available. The site is using very small saterllete styem for internet and it shifting in hiigh traffic density.

I remote there. reopen the outlook and did not see any certificate alert any longer.

Thanks for your pos.

Brgds

Liu Wei

Sorry, I update late due to remote the site is not available. The site is using very small saterllete styem for internet and it shifting in hiigh traffic density.

I remote there. reopen the outlook and did not see any certificate alert any longer.

Thanks for your post.

brgds

Liu Wei