This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Firewall - VPN Certificates Needing Annual Redeployment

Hi Sophos,

We currently use the SSL VPN for our remote user base, but as the included SSL certificate expires somewhat regularly we have to reinstall the local client. Whilst not the end of the world, it's an inconvenience when we have a significant number of remote users.

I did some reading and it appears there's a 'new' version of the SSL VPN that doesn't require clients to replace their installation so that the new certificate is included to authenticate the connection. Can someone point me to some comprehensive guides to set this up so that we may change over from our current provision to this new platform?

Many Thanks



This thread was automatically locked due to age.
  • So first of all, the certificate of SFOS are actually longer valid. Annual should be wrong to be honest, but depends on your cert? 

    Second, Sophos connect can automatically upgrade the cert, if needed. It will detect this issue and update the cert based on the provisioning file: docs.sophos.com/.../index.html

    __________________________________________________________________________________________________________________