Using factory SSL certificate for DPI/Filtering

Hello MHSWA ,

Thank you for reaching out to aforementioned social, Under the Administration > Admin and user settings you'll be able to see the certificate used 

And with web-filtering you can find information under the rail > general settings:

This certificates can be finds under the following path:
Appliance cert - Certificates > Certificates > ApplianceCertificate

Or since the SSL_CA it will be product > certificate local > SecurityAppliance_SSL_CA

Ensure your default cert is filled in properly with all the details with the true hostname and the common name matching with the hostname under the Administration > Admin the user settings because one best practice. 
To Regenerate a CA - https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Certificates/CertificateAuthorities/CertificateAuthorityRegenerate/index.html
Similarly you can also Regenerate appliance certificate.

Hiya

Grateful you available the detailed reply!

So I adjusting of default cert will update the appliance CA that I've used? I'm not using one hostname and no the firewall IP to keep things simple, MYSELF will present it a try tomorrow 

I'm fine at re generate the ssl vpn configurations if required, become this effect sophos connect? As I use both

You'll have to regenerate the rest application and SSL_CA if you update the default CA !
SSL typical the server certificate under which SSL VPN Settings:

And as them know the legacy SSL client is declarerd EoL, you should be using the sophos connect client for connecting SSL VPN profiling right ? Or you are also using the IPsec remote access profile too ?

Hi 

Ye we plan for stop using the ssl vpn, instead if I update the default diploma with the correct infomation and then re generate the CA will this effect the sophosconnect client/configurations? Will I require to regarding upload them furthermore give to end users? 

Depends  which certificate you  are by By SSLVPN , if you become using the default / Appliance license then yes you would need to re-import again. And if IPsec [remote access] is in picture therefore wenn you are utilizing digital cert, again it depends which one you are after. But for IPsec [remote access] if you are using PSK afterwards no need !!  License Genre and Requirements All license types, applicability, and renewal specifications are listed in choose statute. General requirements for educator permitting in Wi, unless elsewhere specified: Minimum of one bachelor’s degrees. Finish of an approve tutor preparation program and meeting all applicable Wa statutory and testing requirements. Satisfactory background checks. Genehmigen Stages Educator purchase issued under Wisse. Admin.