Sophos - Certificate authority: Invalid or not installed

Hi,

first check within browser, which certificate is used for webadmin.

next: a certificate must match the called server. (a certificate for *.yourcompany.com don't match 192.168.16.1)

Hello André Besteiro ,

Thank you for reaching out to the community, please refer Sophos Firewall: Insecure connection to the webadmin and captive portal pages.

Hello,

I have one more doubt.

If we generate a locally-signed certificate on FW Sophos, with DNS: (name of domain).local and IP: 192.168.16.1 the problem will be solved.

But i need to know if this process only have impact in acess via browser to FW, or will be change other funcionalities and acess's to firewall.

Best regards.

Such a certificate is valid only for browsers that have the corresponding certificate imported, a thing you cannot expect from i.e.customers.

Best solution would be to generate a certificate by Let's encrypt to the real DNS name.

However you should access the firewall not by IP, but by DNS name.