CA setup

Question

Hello Team , 
 
 would you please help to setup CA on firewall . 
 1.why we need to configure every single user with CA? 
 2. I have follow document of xg firewall for CA .but no luck 
 Installed configured CA in chrome but its showing me un trusted why thats happen any tool debug it ?

LuCar Toni · Accepted Answer

Hi, 
 Which one? 
 There are 2 CAs on XG. Default and SSL. You use SSL for the SSL Decryption.

LuCar Toni · Answer

Hi, check out this post: 
 https://community.sophos.com/products/unified-threat-management/f/web-server-security/79641/howto-let-s-encrypt/381075#381075 
 Install the UTM-generated SSL certificate into your systems. Like this: https://community.sophos.com/kb/en-us/115315#How%20to%20deploy%20the%20Proxy%20CA - note that using the Active Directory deployment method doesn't cover Firefox because years ago Firefox divorced it's certificate management from Windows and there is no "easy" way to deploy that certificate on a mass scale - unless someone has access to GPO templates that include the Firefox certificate store since the last time I looked for some. 
 The steps in that article are a bit light on how to do that AD import, but this article for their web gateway applies https://community.sophos.com/kb/en-us/42153#GPMC - just use the cert you download from the AD step in the previous article in step 8 from this link to the "Installing the CA with Group Policy Using the Group Policy Management Console (GPMC)" procedure.

LuCar Toni · Answer

Simple download it and upload it to the clients. 
 You will find more details here: 
 https://community.sophos.com/kb/en-us/123048

CA setup

CA with Group Policy Using the Group Policy Management Console (GPMC).