SSL Certificate Distribution

Question

SSL Certificate Distribution &ndash; I just wanted to check that there is no way to add a link to the SSL certificate that clients need to install from the Sophos Sign In Page? The Smoothwall Sign In Page had a separate section which allowed you to download the certificate(below link) and had instructions for how to install it on various different devices 
 http://smoothwall.ip.or.hostname/getmitm

thanks 
 Mathew

Vivek Jagad · Answer

Hey Manu_Mathew , For the domain joined users you can push the cert via AD and for the BYOD users - BYOD devices that are not corporately managed then it is hard to put a Certificate Authority on the device. That being said, they are less likely to have antivirus software on them and therefore are more likely to download or already contain malware. Regardless of the HTTPS Decrypt and Scan, you should probably not have them on the same network segment as the rest of your corporate network or give them access to your corporate network. It is better to put them on a separate guest network. > SSL CA certificate installation guide: https://support.sophos.com/support/s/article/KB-000035645?language=en_US ------------------ > HTTPS Decrypt and Scan FAQ: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121482/https-decrypt-and-scan-faq

emmosophos · Answer

Hello Mathew, 
 Thank you for contacting the Sophos Community. 
 This would be a feature request, please reach out to your Account Manager/Sales Engineer so they can submit your idea in our internal system, and alternatively you can also submit your feedback using the feedback option within the Firewall (Top of the screen) 
 Regards,

SSL Certificate Distribution

Top Replies