Thread Info
  • State Verified Answer
  • +3 person also asked this people also asked this
  • Locked Locked
  • Replies 37 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 22583 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firmware 4.3.8.1 & expired certificate 30th May 2020

Andrew Meek

We're currently running 4.3.8.1 across all web appliances / single management appliance (it's been stable, we've had random issues in the past and do not update unless a specific reason forces us to..).

Today we experienced https scanning issues with some sites. All sites scanned through SSL Labs showed an expired cert 30th May 2020. Relating to this article:-

https://thesslonline.com/blog/sectigo-addtrust-external-ca-root-expiring-may-30-2020


Has anyone else had https inspection issues today on later firmware versions 4.3.9, 4.3.9.1 or 4.3.10 ??

Does the following bug fix listed in 4.3.9 release notes cover this specific issue?

NSWA-1634

The trusted CA certificates used for certificate validation have been updated.

Does updating to later versions replace the appliance cert used for https inspection?

 

Interested in comments from Sophos dev team if they are on this channel.

Thanks in advance!



This thread was automatically locked due to age.
Parents
  • +1

    Hello,

    If you are still experiencing issues, please ensure that you have performed these steps.

    • Please check that there a no Sectigo Certificates/affected websites certificates not added in the "Configuration > Global Policy > Certificate Validation > Check the custom cert list"
    • Please try clearing the "Certificate Cache" under the "Configuration > Global policy > General options > Clear Certificate Cache". Please do this during downtime only. Wait for 15 to 20 minutes after doing this as it may take several minutes.
    • Please reboot the web appliance/s one by one after that.

    Regards,

     

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Reply
  • +1

    Hello,

    If you are still experiencing issues, please ensure that you have performed these steps.

    • Please check that there a no Sectigo Certificates/affected websites certificates not added in the "Configuration > Global Policy > Certificate Validation > Check the custom cert list"
    • Please try clearing the "Certificate Cache" under the "Configuration > Global policy > General options > Clear Certificate Cache". Please do this during downtime only. Wait for 15 to 20 minutes after doing this as it may take several minutes.
    • Please reboot the web appliance/s one by one after that.

    Regards,

     

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Children
Unfiltered HTML