HTTPS / SSL Error without HTTPS Scanning

This is the XG itself. To block pages, XG needs to intercept the connection.

https://community.sophos.com/kb/en-us/132997#What%20are%20some%20security%20concerns%20for%20HTTPS%20scanning?

Would say, this is the XG itself and their Blockpage. 

Hi Jonny,

if you wish to use https decrypt and scan, yes you need the CA deployed. What you appear to be seeing is your web browser throwing up an error.

Ian

Hey all, 

Thanks for the instant answers and the KB link. 

Ok, so if I understand it correctly, this is by design because the XG intercept the https request and therefore we need a client trusted CA. 

So I will change the setting that the connections will be dropped without user notification. 

Thanks :)