I've Just installed the home version of the firewall. I'm new to all of this so I need the guide. I have to say the Sophos website is quite hard to find things in! The email i received with the code has links to guides but every time i click on the…

I have sophos firewall connected in bridge mode. I have a synology server on my home network with adguard home on it. I'm learning everything slowly but I have a problem with the error NET::ERR_CERT_AUTHORITY_INVALID it is the main one when I enter the…

Hey guys, reaching out for some much-needed help. Have read similar posts but nothing makes sense to me in them. I have purchased a certificate as well as created a local active directory certificate server. (All Witchcraft to me) Have installed them…

After reading quite a lot about the lack of support for Let's encrypt and studying the various solutions other people came up with I wanted to post my solution. Over the last couple of days I wrote a script to upload a certificate to the firewall, update…

I'm trying to update our Certificate on the Firewall, but it says it is in use by VPN, which is true. How do I update it then. I tried choosing the localappliance certificate as a temporary holder to try an update, but when I do that, it says you must…

we have a problem, the problem is after we did a firmware update from 17.5.9 MR-9 to 18.0.6 and now it's on firmware 18.5.4 MR-4, to access "Admin and user settings -> admin console and end -User interaction ". before we updated the firmware (17.5.9)…

Hello there, I just enabled a web filter policy to block various websites, but I'm having issues with the user notification options. I have installed a valid LetsEncrypt SSL certificate and it's working great for the user portal. However when a webpage…

Hi, is there any way to generate the "per user certificates" used for SSLVPN without logging in to the userportal as an admin? Users are AD users. We have a big SSLVPN rollout and this would help us to do this much faster. Regards, Sebastia…

Sophos Connect uses openvpn as back-end for SSL VPN Connections. The openvpn client that is included with Sophos Connect supports getting the client certificate from the Windows Certificate Store (the option is cryptoapicert). This option works well…

Hi all, today i need to understand something about sophos certificates just at the beginning of the year it was impossible for me to access the administration console of sophos, so I emptied the cache of the browser then I was able to authenticate…

Please guide me on how to map SOPHOS Firewall Public IP with Public SSL Certificate. Also, how to access Firewall with a Hostname instead of an IP Address

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Note: Make sure your Sophos Firewall time is correct to avoid potential…

For some strange reason the XG running 19.5.0 is not hosting a SSL certicate for the captive p ortal. For the Firewall adm in console itself it's working fine. I have already tried re-adding the certificate without any luck. SSL Admin settings …

Hi, I was trying to connect site-to-site vpn, But it was not working with below. 1)upload local certificate 2)Remote certificate is selected as External certificate 3)upload Remote CA Certificate Below is the image to depicts what i was tried…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Hello Community, Thank you to Rico for his contribution. This…

Hi and sorry for my poor english, I'm triying to use the PHP script provide from user burton, but the scrip say this: CREATING TEMP CERT... <?xml version="1.0" encoding="UTF-8"?> <Response APIVersion="1800.1" IPS_CAT_VER="0"> <Login> <status>Authentication…

Hi! I´m facing an issue that I could not resolve. I have and XG330 with SFOS 19.0.1 MR-1-Build365. I use the firewall as a web proxy. Microsoft domain services enviroment. It´s weird that it´s working any webpage without any problem and suddenly…

AVE! Im a home user and i was trying to test some CaprtivePortal things and I know how selfcerts are working so i decided to upload LE cert to XG and change it in <AdminAndUserSettings> I dont know why but devices(phones) still are getting ssl error…

Dear Sir, I am not getting web portal while accessing Internet through web proxy Instead every time it shows certificate error. I have created a web appliance certificate & installed it in PC still every time it asks for certificate & then I have to…

Hello, is there any way to allow LE without manual enabling firewall and nat rules? I have couple of web servers on same port 443 and I would like to enable them to use LE for generating new and renewing certificates but I'm unable to find the way.…

So, I have an internal CA that I use for everything on my network. This CA also handles the VPN components that I use. Namely, I have a root CA and multiple intermediate CAs underneath for different use cases - one is for SSL Client Auth (so SSL cert…

Hi .. Just wanted to list the steps I performed to finally validate LE Cert on XG 19.0.1 MR-1-Build365. I spent over a month trying to narrow down the issue and I might have read every article in this forum with no avail. I hope this helps. The steps…

I'm setting up IPsec tunnels between HO and several branch offices using IPSec with certificates. I'm confused what to put in the SANs or Cert identifier fields. I played with the Cert Identifier using DNS names but it looks like they all have to resolve…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Note: Make sure your Sophos Firewall time is correct to avoid potential…

Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Note: Make sure your Sophos Firewall time is correct to avoid potential…