Clientless Users

Hi Elysee Lukusa 

Please refer the article for Certificate error- https://community.sophos.com/kb/en-us/123530 and https://community.sophos.com/kb/en-us/123048

For clientless user details and configuration - https://community.sophos.com/kb/en-us/123039

Hi Keyur,

I already know how to set up clientless user i'm only struggling on how to prevent them on using the sophos certificate

Hi Elysee Lukusa 

I have shared the FAQ on HTTPS decrypt and scan and how to import SSL CA into a web browser and user system for certificate error issue.

You can create a separate LAN to WAN firewall rule for the clientless users.

1. Navigate to firewall

2. Click on Add firewall rule

3. Select User/Network Firewall rule

4. Source zone LAN, Destination zone WAN

5. Source N/W ANY, Destination N/W ANY

6. Identity > Match known users

7. Select all Clientless users

8. Do not apply Decrypt & scan HTTPS in Web malware and content scanning

9. Apply NAT and create the rule and put the rule on top of every firewall rule and check

Hi Elysee Lukusa 

I have shared the FAQ on HTTPS decrypt and scan and how to import SSL CA into a web browser and user system for certificate error issue.

You can create a separate LAN to WAN firewall rule for the clientless users.

1. Navigate to firewall

2. Click on Add firewall rule

3. Select User/Network Firewall rule

4. Source zone LAN, Destination zone WAN

5. Source N/W ANY, Destination N/W ANY

6. Identity > Match known users

7. Select all Clientless users

8. Do not apply Decrypt & scan HTTPS in Web malware and content scanning

9. Apply NAT and create the rule and put the rule on top of every firewall rule and check