When the core can no longer connect to the gateway because of invalid gateway certificate (CA mismatch), the UI still reports that the gateway is connected.
2026-02-06T15:26:04.095596Z ERROR defguard_core::grpc::gateway::handler: message=Failed to connect to Gateway https://xxx.xxx.xxx.xxx:50066/, retrying: code: 'The service is currently unavailable', message: "invalid peer certificate: UnknownIssuer", source: tonic::transport::Error(Transport, ConnectError(Custom { kind: InvalidData, error: InvalidCertificate(UnknownIssuer) })) [1.6.1 Debian 13.0.0 x86_64]