Disable certificate authority web proxy

Tich,

try to disable the micro-app scanning from console:

system application_classification microapp-discovery off

and clear the browser's cache.

If it does not work, restart Tomcat service from XG advanced shell:

service tomcat:restart -dsnosync

Regards

I just installed XG and once I had the basic configurations done I was online but more than half the websites I got to regularly were being blocked like the OP (your connection is not private.  NET::ERR_CERT_AUTHORITY_INVALID in chrome and a similar error in IE).  I've tried a number of "fixes" but none worked until I read this post.  I had found a number of posts about either disabling the microapp discovery but just doing that did not work.  The missing piece was to restart the tomcat service.

Would it be possible to have this be a bit more clear in the UI?  anyways thank you this really helped me, as XG was not usable in that state.

I meant to ask, what are the impacts/risks of disabling this?  Do we lose any features/functions?

There is not problem disabling it.   See here for more info.

https://community.sophos.com/kb/en-us/125458

Great thanks!

This is still an issue for us in 17.5

There a workaround or sugesstion for our version.

This is an issue solved long ago.  All boxes should have

system application_classification microapp-discovery off

If you are having an issue, it could be a different cause.  I recommend opening a new thread and describe the symptoms of your problem.

EDIT:  My reply was in regards to the thread about microapp-discovery, not about the original post about HSTS.  In any case, please open a new thread.