Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions WAF Certificate Changes

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 4 replies
Subscribers 41 subscribers
Views 2196 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF Certificate Changes

Florian Keller2 over 3 years ago

Has Someone a Idea to change the Certificates on Multiple WAF Rules

i have an Single Certificate with Multiple Domains (SAN)

however now the Certificate is Expired and i need to change it, but every time i go onto a WAF rule the Domain List is empty

the new Certificate has all the current Domains and also some Extra but even if i do not add the new Domains the Domain list is still empty

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 3 years ago in reply to Florian Keller2 +2 verified

Do the configuration once, as you wish and use a API string to read the current configuration. Then replace the new certificate and also set the same kind of configuration as the old one. Simply: Read…

0 LuCar Toni over 3 years ago

Can you simply add the needed domains to the WAF rule?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Florian Keller2 over 3 years ago in reply to LuCar Toni

there are multiple rules with multiple domains and i use lets encrypt certificates, so it is not an option to do this every 3 month with alle rules and domains
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 3 years ago in reply to Florian Keller2

Do the configuration once, as you wish and use a API string to read the current configuration. Then replace the new certificate and also set the same kind of configuration as the old one.

Simply: Read current config. Put it into a array. Replace the old certificate in the array with the new certificate. Upload the new configuration with a SET to the firewall.

__________________________________________________________________________________________________________________
Cancel
Vote Up +2 Vote Down

Cancel
0 Andrea V over 3 years ago

I have a similar problem, I have a SAN as a certificate even if I upload the new certificate on the websites behind the WAF I always find the old one expired.
Cancel
Vote Up 0 Vote Down

Cancel