Uploaded Certificate in Sophos XG Firewall Showing Not trusted

Hi Sacombank Cambodia itsupport_sc If you hover the mouse cursor on the red icon what reason you are getting there? is it showing any unexpected issue error (Which generally appears due to missing Cert authority for this CA on XG)?

Hi,

Thank you for reaching out to Sophos Community.

In Addition to Vishal. Kindly also check the older post with the same query.

 XG Firewall with Digicert Certificate 

" It  isn’t possible to use the third-party signed certificate for HTTPS decrypt and scanning; for a detailed explanation, please check the following document."

HTTPS Decrypt and Scan FAQ.

Hi Vishal_R 
Yes when I put the mouse cursor on the red icon it shown as Certificate authority: Invalid or not installed issuer: /C=US/0=Digicert.........
So it means we need to upload the CA of our vendor or not?

Hi ,Sacombank Cambodia itsupport_sc  Yes you may add your vendor missing CA under XG (Under Cert Authority) tab which will complete the cert chain for your added certificate and it will reflect with proper status in place of the red cross sign. 

Hi Vishal_R 

Thanks for your reply, After I upload the cert CA of vendor, the status is changed to trusted now. Thanks for your support!

Hi Sacombank Cambodia itsupport_sc Thanks for sharing the latest feedback with us and I am glad you managed to fix the issue with provided steps.