Is there a simple way to replace an expired certificate without having to manually replace it with a valid one in all WAF rules and other places where it is used?
This thread was automatically locked due to age.
Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
Is there a simple way to replace an expired certificate without having to manually replace it with a valid one in all WAF rules and other places where it is used?
Hey Jaroslav Faldik ,
Thank you for reaching out to the community, you can use API string to read/update the certificate.
Additionally, you can refer: Purging expired certs from Sophos Firewall & Certificate Renewals with WAF and Cloudflare. A old thread which may come handy: WAF Certificate Changes.
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Hey Jaroslav Faldik ,
Thank you for reaching out to the community, you can use API string to read/update the certificate.
Additionally, you can refer: Purging expired certs from Sophos Firewall & Certificate Renewals with WAF and Cloudflare. A old thread which may come handy: WAF Certificate Changes.
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Hi
thank you for your answer. But this method is not very simple. Is there really no easier way?
As of now yes...
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.