I'm using a Sophos XG105w. I have https scanning switched on for some PCs on my network, so that means the Sophos is checking website certificates and the certificate presented to the browser is the Sophos one. All works fine for most websites. Occasionally when I'm setting up a new website, I'll open a site that has an invalid certificate on the server. I'll then fix the problem on the web server and once the certificate is correct, all other PCs here and elsewhere see the correct certificate with no errors. However the PCs which are using https scanning via the XG still report the old invalid certificate. I've tried reboots, updates, restart of Web Proxy service, etc. It definitely isn't the PC at fault as switching off the https scanning on the XG makes it work.
How does the XG cache certificates from remote web servers when https scanning is in use? How can I clear or reload this cache?
Thanks,
Stephen.
This thread was automatically locked due to age.