Certificate error

Question

Hello again, 
 
 Today morning one client requested me to open Twitter website, so i add the domain in same rule which social networking already in denying. On the log i can see the twitter is allowed but on pc it keep loading after some time he received certificate error.

lferrara · Answer

Feroz, 
 on the Firewall rule that is matching this web traffic, HTTPS is enabled. Can you confirm that? 
 In this case you have to import the Sophos CA inside your browser and the issue will disappear. 
 Regards,

lferrara · Answer

Feroz, 
 from the XG, go to Certificates > Certificate and download the Sophos Appliance SSL CA. Import it on your user's browser and the message will disappear. The browser is complaining because it expect the SSL Certificate from Twitter but it receives another Certificate.

lferrara · Answer

Feroz, 
 you can deploy them using GPO if they are under an Active Directory domain. Otherwise you can use some RMM tool, that you usually use for distributing SW, like SCCM, LANDESK, you can use those tools and deploy the Certificate. 
 Google it and you will find the proper way. 
 Regards