I am getting an error sophos xg client authentication agent cannot validate certificate

Timo,

connect to XG CLI > Option 5 > Option 3 and then move to /var/tslof. You should have a CAA.log (or something similar, sorry I am not at the office). Type the tail -f caa.log (or what the filename is....) and reconnect using the client authentication agent and post the logs.

Thanks

Thanks Iferrara

The file caa.log does not exist in the /var/tslog folder. Any idea what its name is on the XG125?

Thanks

Timo

Hi

I found out what my problem was. Had imported and installed certificate in windows for only one of the XGs. Soon as I installed this for the second XG, the CAA works on any of the XGs.

Thanks

Timo

Timo,

I am happy that you fixed your issue. CAA logs are inside access_server.log. To debug CAA launch the command:

service access_server:debug -dsnosync

Sorry but I was out of the office and I did not remember the exact name of the log.

Regards

hai Timo can you please explain how you tackled this issue in client system

Hi Ashok leyland sch.

I had to download the authentication agent again for each user and install with a new certificate from the device. Try that.

Regards

Timo