This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

proxy ca cert expire alert ?

any idea how to fix below, utm is setup for auto updates

1 certificate(s) will expire within the next 30 days:
Proxy CA

--
System Uptime      : 18 days 18 hours 38 minutes
System Load        : 0.07
System Version     : Sophos UTM 9.508-10

Please refer to the manual for detailed instructions.

Colin

This thread was automatically locked due to age.

Parents

0 BAlfson over 7 years ago

There have been other threads about this, Colin. It's the CA used in Web Filtering to allow the Proxy to scan HTTPS traffic. If you haven't distributed the Proxy CA to your users, just [Regenerate] one on the 'HTTPS CAs' tab of 'Filtering Options'. You will need to distribute the new CA to any device that uses the old one.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 colinjmx5 over 7 years ago in reply to BAlfson

We dont use the web filtering option so why is this happening ?

Do we need to enable but not use to allow regen option to be selected ?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to colinjmx5

Those are good questions for Sophos Support - please let us know what they say.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 colinjmx5 over 7 years ago in reply to BAlfson

enabled web filtering and regenerated proxy ca, need to check no alerts over next few days.

if fixes will disable web filtering
Cancel
Vote Up 0 Vote Down

Cancel
0 Jerry Carter over 4 years ago in reply to colinjmx5

I know it's been 2+ years, but did this work? I have a similar situation. I'm getting emails the Proxy CA is going to expire, but from what I can tell Web Filtering is not even turned on. (I inherited this unit, so thanks in advance for any reply.)
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago in reply to Jerry Carter

Hi Jerry and welcome to the UTM Community!

The only way I know to address this is with a short-term demo license that lets me turn Web Filtering on to be able to generate a new CA - maybe your reseller can help with that. Maybe Sophos Support has a better trick.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 4 years ago in reply to Jerry Carter

Hi Jerry and welcome to the UTM Community!

The only way I know to address this is with a short-term demo license that lets me turn Web Filtering on to be able to generate a new CA - maybe your reseller can help with that. Maybe Sophos Support has a better trick.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data