Issue an intermediate CA certificate for HTTPS and SMTPS scanning

Hi Matthew,

Greetings.

Please refer the link to configure an intermediate CA:

https://community.sophos.com/kb/en-US/123003

https://www.sophos.com/en-us/support/knowledgebase/123036.aspx

Hope that helps.

Thanks

Sachin Gurung

> Hi Sachin,

> Please refer to my post where I describe why this solution is not sufficient.

This was intended as a reply to (https://community.sophos.com/products/xg-firewall/f/130/t/64560).

Hi,

Can you please elaborate your requirement on this?

Thanks

The uploaded CA certificate must NOT have 'Digital Signature' key usage. Basic constraints should also be NOT CRITICAL.

X509v3 Basic Constraints:
	CA:TRUE
X509v3 Key Usage:
	Certificate Sign, CRL Sign

I think there is some misunderstanding here. I posted on this thread (https://community.sophos.com/products/xg-firewall/f/130/t/64560) and expected you were replying to that.

Because my replies are only related to the problem on the other thread I will remove them from here and post them there.

I think there is some misunderstanding here. I posted on this thread (https://community.sophos.com/products/xg-firewall/f/130/t/64560) and expected you were replying to that.

Because my replies are only related to the problem on the other thread I will remove them from here and post them there.