[HTTPS Scan - Issue] Epic Launcher and Discord

Question

Hello Sophos-XG Community, 
 my situation at home using a Sophos XG Home Lic. Firewall and happy about my choice. :D 
 Got the CA running with my Firewall and all seems well until I start using: 
 Epic Launcher and Discord 
 I could narrow it down to the HTTPS Scan when this feature is off all works very nicely... if its on the Epic Launcher will not authenticate and Discord (Desktop App) does not connect! 
 On the Log what I could find is that both use a embedded version of the Mozilla engine. (As much as I know Mozilla does not use build in Certificate Store from Windows) 
 Is there another way around that? 
 Would like to have the HTTPS Scan on at all times.. 
 Firmware of the XG is SFOS 17.5.8 MR-8 
 Best regards 
 Eli.

shred · Accepted Answer

Some websites/apps simply will not function with HTTPS decryption and scanning. I just create a web exception policy for these websites/apps. I created a page on the community wiki here with the website/apps I've discovered thus far that have issues with HTTPS decryption and scanning: 
 https://community.sophos.com/products/xg-firewall/w/xg-wiki/43/urls-that-do-not-work-with-https-decryption 
 I haven't used the Discord app but when I tried to use the Discord website, it would not work unless I bypassed HTTPS decryption and scanning.

Keyur · Answer

Hi Eli I would recommend referring the articles for HTTPS scanning for Sophos XG firewall. https://community.sophos.com/kb/en-us/132997 https://community.sophos.com/kb/en-us/123048