Appliance Certificate

Hi,

Thank you for reaching out to Sophos Community.

Can we inquire about what firmware version/SCC version you’re using?

Regenerating the Appliance Certificate should not affect other services beyond SSL VPN and WebAdmin.

Verify that the SSL VPN configuration on the new unit reflects the correct certificate information and that firewall rules are correctly configured to allow VPN traffic to reach internal resources.

For additional reference, you may see the following RR

• Sophos Firewall: When will SSL VPN users need to re-download the configuration

Hi,

Thank you for reaching out to Sophos Community.

Can we inquire about what firmware version/SCC version you’re using?

Regenerating the Appliance Certificate should not affect other services beyond SSL VPN and WebAdmin.

Verify that the SSL VPN configuration on the new unit reflects the correct certificate information and that firewall rules are correctly configured to allow VPN traffic to reach internal resources.

For additional reference, you may see the following RR

• Sophos Firewall: When will SSL VPN users need to re-download the configuration

Thank you, the ApplianceCertificate currently lists the previous units serial number. As mentioned the SSL VPN clients have ben using the system since 2017, although I moved 99% of users to IPSec, SSL VPN is the only configuration that will thru China's Great firewall.  So this is a new issue since the replacement at the end of April 2024. We have had no users require an SSL connection till last week, so this is the first test.  Version 19.0.3, previous unit was 18.5.

I found the problem, version 19 moved to a CIDR style network assignment and it was not what my firewall rule contained. I simply extended my firewall rule and everything works. My range was x.50-x.100 in my firewall rule but v19 was starting at x.1, this was outside my range. All good now, tested and verfiied.

Hi,

That is great to hear and thank you for the update.