This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Error certificate despite of https turned off and webpolicy set to none

Hi Everybody,

I have a XG 125 17.0.5 MR-5 where we have a web rule which https decrypt is turned off and web policy is set to none(follow attached).

However, when trying to access some website, it shows a certificate error(using the Sophos SSL certificate). This is not the worst: after I installed the sophos certified in the windows repository, the browser doesnt use the sophos ssl certificate anymore. It uses the original certificate from the website. Is this not strange?

Is this a normal behaviour?

Thanks in advanced,

Fernando Dias

This thread was automatically locked due to age.

0 FloSupport over 7 years ago

Hey Fernando Dias

Welcome to the Sophos Community!

Would it be possible to verify that the web traffic you are generating is being matched to the correct firewall rule you have configured? You can perform a packet capture on the GUI to confirm this.

Best,
Cancel
Vote Up 0 Vote Down

Cancel
0 Fernando Dias over 7 years ago in reply to FloSupport

Hi,

I made what you propose and the rule which is in use is the firewall rule where the https decrypt scan is turned off and no web policy. There is only a IPS active(IPS Defaults).

Thanks in advance,
Cancel
Vote Up 0 Vote Down

Cancel