Client downloads

Use these settings to download the clients and components that support single sign-on, transparent authentication, and email encryption.

Single sign-on

Sophos Transparent Authentication Suite (STAS)
Enables transparent authentication whereby Windows credentials can be used to authenticate and the user is required to log on once only to access network resources. This does not require a client on the user’s machine.
Sophos Authentication for Thin Client (SATC)
Enables transparent authentication for users in Citrix or Terminal Services environments whereby network credentials can be used to authenticate and the user is required to log on once only. This does not require a client on the user’s machine. SATC supports only TCP connections, not UDP connections.

Authentication clients

Download MSI
Enables network administrators to install authentication clients on user devices using Microsoft Installer.
Download CA for MSI
Download the digital certificate to be installed alongside MSI on the client to ensure a safe connection to the firewall.
Download for Windows
Enables Windows users to log on to the network and access the internet according to the policies configured on the firewall.
Download for MAC OS X
Enables macOS users to log on to the network and access the internet according to the policies configured on the firewall.
Download for Linux
Enables Linux users to log on to the network and access the internet according to the policies configured on the firewall.
Download certificate for iOS 12 and earlier and Android client
Download the digital certificate to be installed inside Sophos Network Agent to ensure a safe connection to the firewall.
Install client certificate in iOS 13 and later
Download the default CA first. Then click the link to install the client certificate. In the iOS Trust Store, manually turn on trust for the certificate. For more information, see knowledge base article 123755.

SPX Add-In

The SPX add-in allows users to encrypt outgoing messages using Sophos Email Protection directly from Microsoft Outlook.

For an interactive installation, run setup.exe.

For an unattended installation, run the installer as follows:

msiexec /qr /i SophosOutlookAddInSetupUTM.msi T=1 EC=3 C=1 I=1
Unattended installations require the following:
  • Windows XP, Windows Vista, Windows 7, or Windows 8 (both 32 and 64-bit)
  • Microsoft Outlook 2007 SP3, 2010 or 2013 (both 32 and 64-bit)
  • Microsoft .NET Framework 4 Client Profile
  • Microsoft Visual Studio 2010 Tools for Office Runtime 4.0