SFOS 21.5.0 GA-Build171 http/https scan not scanning with Appliance Cert

Hi Rick Dunn Thank you for connecting Sophos community team. Please review the SSL/TLS inspection rules to confirm rule action is to decrypt or not.

If needed, please create a new rule for one machine with a decrypt action and validate the status, and if that works properly as per the requirement, then in the original rule, apply the decrypt action. 

Apply HTTPS decryption

The Box "Scan HTTP and Decrypted HTTPS" refers to "already decrypted HTTPs" by either the Proxy (you do not have the box selected on the right" or the TLS/SSL engine. 

But you have selected "Decrypt connection and show block page" - Which basically means - If the Firewall sees an Website it should block but it is a HTTPS Site but you are not decrypting, we will still try it to show the block page.  

See here for more info: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121482/sophos-firewall-https-decrypt-and-scan-faq#mcetoc_1hbv83qnp9