The IP does not match the selected certificate

Hi Sophos Rules

Please refer below KBA for the same requirement to meet  : 

https://support.sophos.com/support/s/article/KB-000038295?language=en_US 

Regards

1. Hello, thank you for the reply, I did not  explain everything properly. The IP address that I have selected for the internal interface is correct. This is the IP that I go to access the firewall. I will get a warning when I visit and when I click on check setting I will get that warning that the IP address does not match the certificate. When I am going to the standard 172.16.16.16 to access the firewall. I have downloaded the certificate and I have trusted it as well. 

1. Hello, thank you for the reply, I did not  explain everything properly. The IP address that I have selected for the internal interface is correct. This is the IP that I go to access the firewall. I will get a warning when I visit and when I click on check setting I will get that warning that the IP address does not match the certificate. When I am going to the standard 172.16.16.16 to access the firewall. I have downloaded the certificate and I have trusted it as well. 

You have configured the serial no as the hostname of the firewall, can you also check what is the common name under the certificate > certificate authorities > default > common name ? Can you ensure if they are configured the same ?

Try to Generate a locally-signed certificate as per the link :  

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Certificates/Certificates/CertificatesLocallySignedGenerate/index.html 

Keep 172.16.16.16 under the common name and under Advance settings >IP address option available, and make sure you select Generate a locally-signed certificate instead of Appliance Certificate for a test result : 

Regards

Thank you, Problem solved.

I created a new certificate and replaced it like you suggested and the problem has been solved.