XG generated SSL decryption certificate is using SHA-1 digest

Question

Hello, 
 SHA-1 algorythm has been deprecated. XG still generates this kind of certificates for SSL scanning. The browsers now, mark the connection as insecure for this reason. 
 Is this behaviour of the appliance configurable? WIll it be corrected?

Michael Dunn · Accepted Answer

Actually XG Firewall has always used SHA256. 
 In IE, go to an HTTPS website. Now view the certificate. 
 The "Signature algorithm" is sha256RSA. The "Signature hash algorithm" is sha256. 
 Note that the "Thumbprint algorithm" is sha1 but that is immaterial and not a security issue.