Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 2 subscribers
  • Views 12972 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Gateway, could not establish trust relationship SSL/TLS channel

sandeep gurjar

1st attempt at installing Web Gateway and its failing with the error:

 the underlying connection was closed: could not establish trust relationship for the SSL/TLS secure channel.

Please check your internet connection.

 

the machine is a patched windows 7 pro, on AD domain.

the app.exe is run locally as admin.  no issues with network connectivity.

 

 

Any ideas what is causing this error.



This thread was automatically locked due to age.
Parents
  • 0

    Hi  

    Please ensure that your firewall allows communication to our update servers:

    1. Whitelist the following sites and make sure you disable SSL inspection for them:
      • *.mojave.net
      • *.sophos.com
      • *.cwg.sophos.com
    2. Allow 8.8.4.4 and 8.8.8.8 on port 53 for DNS lookups.
    3. If you are doing SSL inspection, create exceptions for anything using our certificate since we don't allow SSL inspection of our traffic.
    4. If you are blocking traffic using untrusted certificates, import and trust our public certificate

    To download our certificate and for further instructions, please following our KBA: How to configure Web Gateway with your existing firewall

    Thanks,
    Karlos

    Karlos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
Reply
  • 0

    Hi  

    Please ensure that your firewall allows communication to our update servers:

    1. Whitelist the following sites and make sure you disable SSL inspection for them:
      • *.mojave.net
      • *.sophos.com
      • *.cwg.sophos.com
    2. Allow 8.8.4.4 and 8.8.8.8 on port 53 for DNS lookups.
    3. If you are doing SSL inspection, create exceptions for anything using our certificate since we don't allow SSL inspection of our traffic.
    4. If you are blocking traffic using untrusted certificates, import and trust our public certificate

    To download our certificate and for further instructions, please following our KBA: How to configure Web Gateway with your existing firewall

    Thanks,
    Karlos

    Karlos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
Children
No Data
Unfiltered HTML