This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Certificates

Ok, my question is how to make Sophos play with my Certificate Authority that I run from the internal domain.  Do I download a certificate from the CA and upload it into Sophos or the other way around.  I am trying to prevent all the bad "certificates" that the browsers are saying are being used.  Not that there is any bad certificate in use.  If I have to upload it to Sophos, will it automatically replace on the time cycle that the CA uses or will it have to be done manually each time?


This thread was automatically locked due to age.
Parents
  • HTTPS scanning is a "man-in-the-middle" approach, so I don't think you can do anything to avoid loading a cert into each browser and each PC via mmc.  You can do it with a GPO like Mike did.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • HTTPS scanning is a "man-in-the-middle" approach, so I don't think you can do anything to avoid loading a cert into each browser and each PC via mmc.  You can do it with a GPO like Mike did.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data