This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Uploaded Certificate in Sophos XG Firewall Showing Not trusted

Sacombank Cambodia itsupport_sc over 1 year ago

I uploaded the certificate in every format (.pem,.pfx,.Cer) but none of showing trusted and always showing RED (X) in trusted for certificate issued from Digicert website. Please assist me to fix on this issue at earliest. Please find the attached screenshot too.

This thread was automatically locked due to age.

Top Replies

Vishal_R over 1 year ago +1 suggested

Hi Sacombank Cambodia itsupport_sc If you hover the mouse cursor on the red icon what reason you are getting there? is it showing any unexpected issue error (Which generally appears due to missing Cert…

0 Vishal_R over 1 year ago

Hi Sacombank Cambodia itsupport_sc If you hover the mouse cursor on the red icon what reason you are getting there? is it showing any unexpected issue error (Which generally appears due to missing Cert authority for this CA on XG)?

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +1 Vote Down

Cancel
0 Erick Jan over 1 year ago

Hi,

Thank you for reaching out to Sophos Community.

In Addition to Vishal. Kindly also check the older post with the same query.

XG Firewall with Digicert Certificate

" It isn’t possible to use the third-party signed certificate for HTTPS decrypt and scanning; for a detailed explanation, please check the following document."

HTTPS Decrypt and Scan FAQ.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +1 Vote Down

Cancel
0 Sacombank Cambodia itsupport_sc over 1 year ago in reply to Vishal_R

Hi Vishal_R
Yes when I put the mouse cursor on the red icon it shown as Certificate authority: Invalid or not installed issuer: /C=US/0=Digicert.........
So it means we need to upload the CA of our vendor or not?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vishal_R over 1 year ago in reply to Sacombank Cambodia itsupport_sc

Hi ,Sacombank Cambodia itsupport_sc Yes you may add your vendor missing CA under XG (Under Cert Authority) tab which will complete the cert chain for your added certificate and it will reflect with proper status in place of the red cross sign.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +1 Vote Down

Cancel
0 Sacombank Cambodia itsupport_sc over 1 year ago in reply to Vishal_R

Hi Vishal_R

Thanks for your reply, After I upload the cert CA of vendor, the status is changed to trusted now. Thanks for your support!
Cancel
Vote Up 0 Vote Down

Cancel
0 Vishal_R over 1 year ago in reply to Sacombank Cambodia itsupport_sc

Hi Sacombank Cambodia itsupport_sc Thanks for sharing the latest feedback with us and I am glad you managed to fix the issue with provided steps.

Regards,

Vishal Ranpariya
Technical Account Manager | Sophos Technical Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel