Firmware 4.3.8.1 & expired certificate 30th May 2020

Hello,

If you are still experiencing issues, please ensure that you have performed these steps.

Thank you emmosophos and Draco!

Stupid me didnt thought about going through the certification validation list. We had the expired one listed there. Removing this (and several other expired ones) seems to did the trick.

Hi Netzzwerker 

Wondered if you could do us a favour, could you test this URL through your updated appliances and confirm if it fails certificate validation?

https://hedd.ac.uk

Tried that website for you Andrew ... works fine for me.

Can confirm. Works without issues.

Thanks both for checking, appreciate that.

We seem to still have issues using that site as an example. We have a lot of manually added certs, may of which are expired no doubt but I cannot find any left related to Sectigo or the add / user trust. Would be helpful if that GUI section showed expiry. Not sure if they appear under any other issuing name. We cleared the cache and left it some time before rebooting all appliances yesterday.

Will refer back to support maybe they can find the offending certificate or cache issue.

Thanks both for checking, appreciate that.

We seem to still have issues using that site as an example. We have a lot of manually added certs, may of which are expired no doubt but I cannot find any left related to Sectigo or the add / user trust. Would be helpful if that GUI section showed expiry. Not sure if they appear under any other issuing name. We cleared the cache and left it some time before rebooting all appliances yesterday.

Will refer back to support maybe they can find the offending certificate or cache issue.

Hi Yashraj S 

Are you able to escalate support case 9920033, we're getting the all too common Sophos web appliance support wall of silence for a day or 2.

We're still having issues with some sites despite clearing certs, the cache and rebooting appliances.

Hello Andrew,

We will follow up with the assigned senior engineer on your support case.

Regards,

Hi emmosophos 

Still nothing from support. I just wanted them to find the offending cert or cache item, to validate why we still see issues with that site as an example.

Thanks

Hello Andrew,

Apologies, I do see that the GES engineer reached to you today, but a few moments later you mentioned the issue was solved.

You mentioned that all the affected sites again seem to be cleared, and seems like Cache took longer to clear.

Regards,