• Sophos XG Home with mailbox.org / smtps / imaps - sending, receiving and scanning

    TheBigGreen
    TheBigGreen
    Hello there, first of all, let me short introduce myself: i am a sophos XG Home User since the weekend. I believe the Sophos XG is a fine solution for every home user. i even would pay for it, even for support. i am using a simple micro-system with…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Alpha SSL wildcard problem

    Andrea_e
    Andrea_e
    Hi! I've bought an Alpha SSL wildcard certificate. I've imported it i my XG 125 But when I go to the WAF firewall rules, I don't see it What stem am I missing? I've done it some years ago, but...I can't remember! Thanks!
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • CSR Certificate Help

    Welington Silva de Lima1
    Welington Silva de Lima1
    Good Morning! Dear Sophos Community, Could you help me to understand about an issue, We are following a sophos KB support.sophos.com/.../KB-000041071 Which shows us how to generate the CSR certificate to be sent to the CA for signature, so far so good…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Renew SSL certificate for email on XG Firewall

    Paul Digby
    Paul Digby
    So, 2 years ago a goDaddy SSL cert was added to XG and been used since that date. It is now renewed with goDaddy and downloaded. I tried replacing existing one with new one, but it said a rule/policy was already using it. So I then added the certificate…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Let's encrypt certificate woes - "Certificate authority: Invalid or not installed"

    h3ctic
    h3ctic
    Too many cooks and s omething has become messy with certificates on our XG and I need some help to get this sorted. (SFOS 18.0.5 MR-5-Build586) virtual Trying to upload a pfx-certificate generated by our certbot gives the dreaded red X. Mousing over…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Can't install a trusted certificate

    GeNTooGeek
    GeNTooGeek
    I am having troubles with installing certificates in Sophos XG Home. Ultimately, I would prefer to setup and install my own CAs(root and intermediate) and use certificate from my own CAs for the web interfaces and for SSL inspection. I setup the root…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • missing ca certs of public urls in xgs appliance ?

    Robert Bude
    Robert Bude
    Hi all, we have installed a new xgs firewall and up to now we trying to keep things save and at a high security level. So we also check Certificate Errors. Today we get an error when access a site which i dont understand. Sophos says TLS Cert is invalid…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • SSL Certificate and Azure Portal

    Karl Radergard
    Karl Radergard
    I get a 404 error when trying to sign in through Azure when we are not on the office domain. When we get redirected to our local adfs sign-in page the Sophos SSL certificate is being used causing a mismatch and the 404 error. The azure login works correctly…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Lets encrypt admin and client access certificate not trusted

    Chris Mottershead
    Chris Mottershead
    I have followed the steps on this thread https://community.sophos.com/sophos-xg-firewall/f/discussions/130486/certificat-let-s-encrypt-untrust but the certificate is still showing as untrusted and i am unable to select it for the admin/client interface…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • LetsEncrypt Certificate not trusted by Spohos XG Firewall

    Posbis
    Posbis
    Hi folks If create a Lets Encrypt certificate (pfx, fullchain cert) and uploaded it to my freshly installed Sophos XG ( SFOS 18.5.1 MR-1-Build326). The certificate is uploaded but shows up as untrusted (red cross). The chain of the certificate…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Workaround for LDAPS with Let's Encrypt

    AlexanderStehlik
    AlexanderStehlik
    Hi threre. With the Firmware update SFOS 18.5.1 MR-1-Build326 we ran into trouble with our LDAP authentication. Our Domain controllers are using Let's Encrypt certificates to allow secure LDAP access (LDAPS). The problem seems to be, that the certificate…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • LetsEncrypt Certs signed by R3 Intermediate cert not Trusted by Sophos XG after reinstalling CA certs.

    Optoisolated
    Optoisolated
    Hi, I recently went through and updated some of my older LetsEncrypt certs and when I imported them they were showing up as Untrusted. The rest I had were still trusted. Unsure as to why, I removed the LetsEncrypt R3 Intermediate and the ISRG Root X1…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Can't set passphrase when creating a certificate

    Alan Spark
    Alan Spark
    Earlier this year I setup VPN on an XG 135 (SFOS 18.0.4 MR-4) and documented the steps. I am trying to follow the same steps on a new XGS 116 (SFOS 18.5.1 MR-1-Build326) but have encountered a difference that I would like to clarify before going further…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Third Party (Digicert) VPN Certificate Renewal

    Clay Tsuhako
    Clay Tsuhako
    Hello: We have a third party certificate from Digicert that we have installed on our Sophos XG210 firewall that will be expiring on 11-08-2021. I need to reissue this certificate via Digicert but I need to add our CSR on the Digicert site to start the…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Custom SSL for Sophos User Portal

    djb-sophos
    djb-sophos
    Hello, We would like to use our own SSL certificate for our Sophos User Portal so users aren't presented with the "Not Secure" warnings when going to the user portal. We have our wildcard SSL imported into the Sophos Firewall. When I went to Administration…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Sophos XG - Lets Encrypt broken - Certificate authority: Invalid or not installed

    Steen Paulsen
    Steen Paulsen
    After the latest DST X3 certificate issue. All of my Let's encrypt certificats is not being validated correctly on my Sophos XG. Everything updated to latest version. I've tried to remove the Let's Encrypt R3 certificates. Re-upload the new ones. Followed…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • problem with certificate - do not see Sophos CA root certificate

    Petr Odvarka1
    Petr Odvarka1
    Hello, I have at several computers this next problem. At working computers I can see certificate of remote server with certificate of Sophos but at some other set of cumputers I see this Certification Path : certificate of Sophos CA is…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Certificat let's encrypt untrust

    lauwiks Cutman
    lauwiks Cutman
    Hello everyone , I recently updated my let's encrypt certificate. This is considered unreliable by the sophos. While it is valid. I use it in WAF rules and it works well. No message from different browsers. As the certificate is considered invalid…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Lets Encrypt DST Root CA X3 Issue

    LHerzog
    LHerzog
    Please read this article to fix Web Proxy issues that come up today with some LetsEncrypt sites: https://support.sophos.com/support/s/article/KB-000042993?language=en_US Delete the expired CA from the CA store on the XG. Solved our issues. You…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • 3rd party SSL Certificate on SOPHOS XG

    Ahmad
    Ahmad
    hi, i have XG210 (SFOS 18.5.1 MR-1-Build326), i uploaded a godady certificate on it. i also uploaded the CA and intermediate CA certificate on it. in certificates against this certificate trusted is green tick. but when i want to use it for we administration…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • SSL Cert uploaded to the XG not showing as trusted

    Stuart Hamilton1
    Stuart Hamilton1
    Hi All, I am clearly missing something here, but Google is not my friend on this one as I cannot find out what. I am trying to install an SSL cert to use in WAF and Mail. I created the CSR Downloaded the request Requested the SSL from GoDaddy…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Easy Home User LE Cert Renewals

    Gary Parr
    Gary Parr
    Hello all, I wanted to share my solution for easy certificate management. If you have a DNS service and a Windows machine, this may work for you. First, check out Certify The Web . This tool runs a service on your machine that manages your certificates…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Web Filter looking for wrong certificate

    Rodrigo Silveira1
    Rodrigo Silveira1
    Hello, I was using a local CA certificate for Web Filter, it was working as expected but yesterday the certificate expired, so I renewed it, deleted the old expired certificate and imported the new one but now the XG is ignoring it and trying to use…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Unable to delete expired Certificate Authorities

    Derek Preston
    Derek Preston
    Trying to delete some expired Certificate Authorities that are no longer used by any of our WAF rules, but receive "Certificate authority could not be deleted" Using WinSCP and navigating to /conf/certificate/cacerts/, the certificate authorities…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Letsencrypt API Update Script - dynamically handles multiple certs, multiple rules, including re-grouping of policies rules

    burton
    burton
    I wanted a way to auto update my letsencrypt certificates for use on my XG firewall and WAF rules. I developed this script to handle multiple certificates, and to be as dynamic as possible. The approach I took to achieve this is the following: 1) Within…
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • View related content from anywhere
  • More
  • Cancel
<>