This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocking *CHIP-Installer.exe

FormerMember over 5 years ago

Hallo zusammen,

ich würde auf unserer UTM gerne jeglichen Download von *CHIP-Installer.exe blockieren. Wie bzw. mit welcher Funktion mache ich das am besten?

This thread was automatically locked due to age.

0 FormerMember over 5 years ago in reply to BAlfson

Hi Bob,

no, I do not like to do it via the user portal but directly via the link passthrough.fw-notify.net/cacert.pem
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to FormerMember

Have you tried deleting the cert from your phone and then loading it via the User Portal?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to FormerMember

Bob, do you have an idea?
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to BAlfson

I called up the link passthrough.fw-notify.net/cacert.pem directly on my iPhone and tried to follow this instructions > community.sophos.com/.../126895
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to FormerMember

It's been awhile, but I think I installed the CA from the User Portal. How did you do it?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to BAlfson

Hi Bob,

when I open the link on my iPhone first appears a query, if I want to allow it to load the configuration profile. So far so good - I confirm the question with "allow"...
Afterwards a message appears, that the profile was loaded successfully.

But when I navigate to the Settings> General> About> Certificate Trust Settings unfortunately, I have no entry to enable the Root Certificates...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to FormerMember

My iPhone Xs is on 12.4.1 and that KB article correctly describes what I see.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to BAlfson

Genau das hab ich gesucht....

Unter https://community.sophos.com/kb/en-us/126895 wird beschrieben "How to trust the Root Certificate" - Aber auf iOS 12.4.1 trifft das nicht zu....

Gibt es eine aktuellere Beschreibung?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 5 years ago in reply to FormerMember

http://passthrough.fw-notify.net/cacert.pem

MfG - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Jonas92

Ich hab auch mal irgendwo gelesen, dass man den iPhone-Usern direkt nen Link zum Zertifikat schicken kann, welchen die aufrufen sobald der User im hausinternen Netz ist...

Finde aber die Seite nicht mehr :-(
Cancel
Vote Up 0 Vote Down

Cancel