Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 28 subscribers
  • Views 15651 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

certificate issue

TarekHalloun

hello after installing Sophos UTM , mail clients (outlook 2010) started getting a new certificate issued by the UTM instead of the one issued by the exchange server 

each time a user opens his outlook he has to accept 3 certificate warning : mail.domain - autodiscovery.domain and mail.domain or he will not receive any mails

even if i install this certificate in the authority place i still get them every time i open outlook 

please advise what to do 



This thread was automatically locked due to age.
Parents
  • 0

    If you are having certificate warnings, you need to install the certificate authority onto the client machines.  Note that Windows/Internet Explorer/Chrome use the same list of authorities but that FireFox has its own.  After confirming this works on one machine, you can use AD to push the certificate to all machines.

    The alternative is to bypass the proxy.  There are different methods depending on your configuration.  

    If you are using transparent mode, then create a higher level firewall rule with your mail server as the destination, set for service HTTP/HTTPS and don't turn on Malware Scanning for HTTP/HTTPS and leave the policy None.

    If you are using standard/explicit mode and have every client configured to use the proxy, you can use AD push to give every client a new configuration not to do so for that address (see above).

    If you are using standard/explicit mode and are using auto-discovery such as WPAD, then you need to change the config file that WPAD is pushing.

  • 0 in reply to Michael Dunn

    hello Michael 

    how can i tell what mode i am using ?!

  • 0 in reply to TarekHalloun

    In standard mode, also called explicit mode, every browser is configured to use a web proxy.  In your browser settings, you'll find proxy settings, typically going out to the XG on port 3128.

    In transparent mode, the browser does not know anything about the proxy.  However due to network design the packets naturally flow over the XG as they do for any other firewalled packet.  The XG sends all port 80 and 443 traffic through the proxy.

     

    This is all based on how you first set up your network.

Reply
  • 0 in reply to TarekHalloun

    In standard mode, also called explicit mode, every browser is configured to use a web proxy.  In your browser settings, you'll find proxy settings, typically going out to the XG on port 3128.

    In transparent mode, the browser does not know anything about the proxy.  However due to network design the packets naturally flow over the XG as they do for any other firewalled packet.  The XG sends all port 80 and 443 traffic through the proxy.

     

    This is all based on how you first set up your network.

Children
No Data