Hi all, We are receiving this security alert on Outlook 365, since ever we installed the Sophos XGS136 firewall. Please guide me to solve this issue. Thanks,

Hello, I regenerated the appliance certificate and I have had a problem where the certificate does not match the IP If I select check settings here I get the IP address does not match. Is there a way to fix this?

I've Just installed the home version of the firewall. I'm new to all of this so I need the guide. I have to say the Sophos website is quite hard to find things in! The email i received with the code has links to guides but every time i click on the…

I have sophos firewall connected in bridge mode. I have a synology server on my home network with adguard home on it. I'm learning everything slowly but I have a problem with the error NET::ERR_CERT_AUTHORITY_INVALID it is the main one when I enter the…

After reading quite a lot about the lack of support for Let's encrypt and studying the various solutions other people came up with I wanted to post my solution. Over the last couple of days I wrote a script to upload a certificate to the firewall, update…

Hey guys, reaching out for some much-needed help. Have read similar posts but nothing makes sense to me in them. I have purchased a certificate as well as created a local active directory certificate server. (All Witchcraft to me) Have installed them…

I'm trying to update our Certificate on the Firewall, but it says it is in use by VPN, which is true. How do I update it then. I tried choosing the localappliance certificate as a temporary holder to try an update, but when I do that, it says you must…

we have a problem, the problem is after we did a firmware update from 17.5.9 MR-9 to 18.0.6 and now it's on firmware 18.5.4 MR-4, to access "Admin and user settings -> admin console and end -User interaction ". before we updated the firmware (17.5.9)…

Sophos Connect uses openvpn as back-end for SSL VPN Connections. The openvpn client that is included with Sophos Connect supports getting the client certificate from the Windows Certificate Store (the option is cryptoapicert). This option works well…

Hi all, today i need to understand something about sophos certificates just at the beginning of the year it was impossible for me to access the administration console of sophos, so I emptied the cache of the browser then I was able to authenticate…

Please guide me on how to map SOPHOS Firewall Public IP with Public SSL Certificate. Also, how to access Firewall with a Hostname instead of an IP Address

For some strange reason the XG running 19.5.0 is not hosting a SSL certicate for the captive p ortal. For the Firewall adm in console itself it's working fine. I have already tried re-adding the certificate without any luck. SSL Admin settings …

Hi! I´m facing an issue that I could not resolve. I have and XG330 with SFOS 19.0.1 MR-1-Build365. I use the firewall as a web proxy. Microsoft domain services enviroment. It´s weird that it´s working any webpage without any problem and suddenly…

Hi and sorry for my poor english, I'm triying to use the PHP script provide from user burton, but the scrip say this: CREATING TEMP CERT... <?xml version="1.0" encoding="UTF-8"?> <Response APIVersion="1800.1" IPS_CAT_VER="0"> <Login> <status>Authentication…

AVE! Im a home user and i was trying to test some CaprtivePortal things and I know how selfcerts are working so i decided to upload LE cert to XG and change it in <AdminAndUserSettings> I dont know why but devices(phones) still are getting ssl error…

Hello, is there any way to allow LE without manual enabling firewall and nat rules? I have couple of web servers on same port 443 and I would like to enable them to use LE for generating new and renewing certificates but I'm unable to find the way.…

So, I have an internal CA that I use for everything on my network. This CA also handles the VPN components that I use. Namely, I have a root CA and multiple intermediate CAs underneath for different use cases - one is for SSL Client Auth (so SSL cert…

Hi .. Just wanted to list the steps I performed to finally validate LE Cert on XG 19.0.1 MR-1-Build365. I spent over a month trying to narrow down the issue and I might have read every article in this forum with no avail. I hope this helps. The steps…

I have configured a PC to have on it DPI following this guide https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Web/HowToArticles/WebProxyDPITLSDecryption/index.html and then I have installed the Default…

hello case # 05914000 created I added the ssl certificate of my vps to the CA and certificate of my sophos XG but now i am getting certificate warnings in outlook even if i install the certificate in trusted roots the certificate date is valid and…

hello I have a vps with WHM(cpanel) for my emails - i added an SSL but during the CSR i did not put a private key Now when i try to add this certificate to sophos for mail scanning , i need a key to be able to sign and validate how can i add the…

Hi All I've been using my XG210 now for a few years, but I've always had random issues with DPI/Web Filtering, around 10% or more of the time I have users who will see the self signed certificate wanting when going to a site they shouldn't be on then…

I am on 19.0.MR1 I have an uploaded certificate which is no longer needed. It was used in WAF rules, those were deleted a couple of weeks ago. However I cannot delete the certificate, I get the red box at the top with " Couldn't delete certificate…

Hello, I have a issue for validation the imported Lets Encrypt Certificate. I issued the certificate with certbot and uploaded it with le2xg.sh. That is working. Sophos XG 18.5.4 MR4 But the certificate is still marked as untrusted. I read some…

I uploaded the certificate in every format (.pem,.pfx,.Cer) but none of showing trusted and always showing RED (X) in trusted. Please assist me to fix on this issue at earliest. Please find the attached screenshot too. Thank You.