Download Client

The Download Client page contains links to download all the clients you might need.

The Device provides various options for user authentication. All the users are authenticated before they are provided with access to network resources. User authentication can be performed using a local database, Active Directory, LDAP, RADIUS, TACACS, eDirectory, NTLM or a combination of these. The Device also supports Single Sign On (SSO) for transparent authentication, whereby Windows credentials can be used to authenticate and a user has to sign in only once to access network resources. SSO can be used in Active Directory and Citrix or Terminal Services environments.

You can authenticate with Device using Captive Portal, Authentication Clients for Windows, Linux, Macintosh, Android and iOS platforms or Single Sign On (SSO).

You can download the following clients from this page:

Single Sign-On

Available only for Administrators.

Sophos Transparent Authentication Suite - Enables transparent authentication whereby Windows credentials can be used to authenticate and a user has to sign in only once to access network resources. This does NOT require a client installed on the user’s machine.

Sophos Authentication for Thin Client - Enables transparent authentication for users in Citrix or Terminal Services environment whereby network credentials can be used to authenticate and a user has to sign in only once to access network resources. This does NOT require a client installed on the user’s machine.

Authentication Clients

Available for all users.

Download for Windows
Enables users using a Windows operating system to log on to the Device to access network resources and the Internet as per the policies configured in the Device.
Download for MAC OS X
Enables users using a system with Macintosh OS X onwards to log on to the Device to access network resources and the Internet as per the policies configured in the Device.
Download for Linux 32
Enables users using a 32-bit Linux operating system to log on to the Device to access network resources and the Internet as per the policies configured in the Device.
Download for Linux 64
Enables users using a 64-bit Linux operating system to log on to the Device to access network resources and the Internet as per the policies configured in the Device.
Download certificate for iOS 12 and earlier and Android client
Download the digital certificate to be installed inside Sophos Network Agent to ensure a safe connection to the firewall.
Note Authentication Clients for iOS/Android can be downloaded from the respective App Store/Play Store. Downloading the client with Google Chrome on Android does not work. Users either have to use a different browser or install the Default Certificate Authority (CA) provided by the Admin as a trusted authority in Google Chrome. Alternatively, users can press long on the download link and select the option “Save Link”.
Install client certificate in iOS 13 and later
Download the default CA first. Then click the link to install the client certificate. In the iOS Trust Store, manually turn on trust for the certificate. For more information, see knowledge base article 123755.

Configuration of CISCOTM VPN Client for Apple iOS

Available only if Cisco VPN Client is enabled and allowed for logged-in user.

CISCOTM VPN Client is software developed by CISCO to establish encrypted VPN tunnels with highly secure remote connectivity for remote workers. Click Install to install the SF-related configuration for Cisco VPN Client in your iOS Device. Import this configuration into the Client so that it can communicate with the SF Device.

SPX Add-in

This feature is available only with a valid Email Protection subscription

This feature is available in Sophos Firewall Models XG105 and above, Cyberoam Models CR25iNG and above, and all Sophos UTM Models.

Click Download Sophos Outlook Add-in to download and install the SPX Add-in. The SPX Add-in simplifies the encryption of messages that contain sensitive or confidential information leaving the organization. The Add-in integrates seamlessly with the user’s Microsoft Outlook software, making it easy for users to encrypt messages through Sophos Firewall Email Protection.

Follow the steps given below to install the Add-in in Outlook:
  1. Unzip the files to a temporary folder.
  2. For an interactive install, run setup.exe (users will be prompted for input).
  3. For an unattended install, the prerequisites are:
    • Windows XP, Windows Vista, Windows 7, Windows 8 (both 32 and 64-bit) versions are supported.
    • Microsoft Outlook 2007 SP3, 2010 or 2013 (both 32 and 64-bit) versions are supported.
    • Microsoft .NET Framework 4 Client Profile.
    • Microsoft Visual Studio 2010 Tools for Office Runtime 4.0.
  4. Now, please run the installer with the following parameters: msiexec /qr /i SophosOutlookAddInSetupUTM.msi T=1 EC=3 C=1 I=1.