This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG cant Sync Licences - SSL error - SSL-CA regen didnt helped....

hi,

i have the problem, that i cant Sync the XG to the Sophos Servers... We have a valid Network Protection Sub, but its deactivated probably because the sync isnt working.

I already checked the web for help and did this log in the ad.shell. It really looks like an SSL error

According to help for this error, I regenerated the Certificate for the SSL and resynct the Time - still not working.

can someone help me?

This thread was automatically locked due to age.

0 LuCar Toni over 3 years ago

Try to fill out the Default Cert. It is not normal, that this cert is empty. Likely a Umlaut in the data caused this issue. The data of Default cert is fetch by MySophos. If you have a Umlaut in the city or your name (like in the community) the data cannot be used for a certificated.
Cancel
Vote Up 0 Vote Down

Cancel
0 DanielKöhler over 3 years ago in reply to LuCar Toni

thx four your quick answer. I will try. The Private key password field... i dont have any key - can i set it random?
Cancel
Vote Up 0 Vote Down

Cancel
0 DanielKöhler over 3 years ago in reply to DanielKöhler

Did it, but still not working. I will restart it later this day and make a new logfile
Cancel
Vote Up 0 Vote Down

Cancel
0 DanielKöhler over 3 years ago in reply to LuCar Toni

Didnt Worked... Other ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 3 years ago in reply to DanielKöhler

Please share a screenshot of the current CA situation.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 3 years ago in reply to LuCar Toni

please check if you have this root CA on your XG:

GlobalSign RSA OV SSL CA 2018

https://eu-prod-utm.soa.sophos.com/api/device/l/appliance this sites SSL Cert is signed by this CA. I checked our XG and we've manually uploaded the CA to our XG - it is not a default CA.

You can download it here https://support.globalsign.com/ca-certificates/intermediate-certificates/organizationssl-intermediate-certificates
Cancel
Vote Up 0 Vote Down

Cancel
0 DanielKöhler over 3 years ago in reply to LuCar Toni

Sure. Could it be a firewall rule?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 3 years ago in reply to DanielKöhler

Now its a different issue. Device not found indicates, the backend server of Sophos does not know this serialnumber.

Do you see the appliance in MySophos?
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to DanielKöhler

Hey Daniel,

It appears that the Device ID of the Firewall doesn't match with the one on the Sophos' Licensing server.

I suggest you open a support case and share the case ID. I'll update the case owner with the details to get this corrected :)
Cancel
Vote Up 0 Vote Down

Cancel