We're currently running 18.104.22.168 across all web appliances / single management appliance (it's been stable, we've had random issues in the past and do not update unless a specific reason forces us to..).
Today we experienced https scanning issues with some sites. All sites scanned through SSL Labs showed an expired cert 30th May 2020. Relating to this article:-
Has anyone else had https inspection issues today on later firmware versions 4.3.9, 22.214.171.124 or 4.3.10 ??
Does the following bug fix listed in 4.3.9 release notes cover this specific issue?
The trusted CA certificates used for certificate validation have been updated.
Does updating to later versions replace the appliance cert used for https inspection?
Interested in comments from Sophos dev team if they are on this channel.
Thanks in advance!
Evening,We are running 4.3.10 and yes we've also been having issues with sites where the expired cert is in the chain.Came here to see if there was a quick solution, like the one I read about for the UTMhttps://www.stephenwagner.com/2020/06/01/sophos-utm-xg-untrusted-website-certificate-expired-april-may-2020/