VPN

You can download remote access IPsec and SSL VPN clients to your Windows, macOS, and iOS devices.

You can download these clients to endpoint devices, such as computers, tablets, and smartphones. You can also use the clientless access connection if it's configured for you.

Use these clients to connect your endpoint devices to the permitted resources within your organization's network. All traffic or only network-destined traffic from your device flows through the tunnel. It's based on the setting your network administrator specifies.

Sophos Connect client (IPsec and SSL VPN)

Do as follows to connect your endpoint devices to the network using the Sophos Connect client:

  1. Click Download client for Windows or Download client for macOS.
  2. Install the client on your endpoint device.
  3. To use the tunnel, sign in to the client using your user portal credentials.
  4. Enter the verification code if you're prompted for two-factor authentication.
  5. On the Sophos Connect client, click the three dots button in the upper right corner and click Import connection to import the files. Do as follows:
    • IPsec VPN connections: Import the .scx or the .tgb file your administrator shares with you.
    • SSL VPN connections: Double-click the .pro file your administrator shares with you to automatically import your .ovpn configuration files to the Sophos Connect client.

      If the administrator doesn't share the provisioning file, move down on the VPN page to the SSL VPN client section. Download the .ovpn file and import it into the Sophos Connect client. The section only appears if your administrator has configured an SSL VPN remote access policy for you.

    Restriction You can establish SSL VPN connections only with version 2.0 of the Sophos Connect client. Currently, version 2.0 is only available for Windows devices. macOS users can use the legacy SSL VPN client.

    Import connection to Sophos Connect client

Apple iOS IPsec VPN client configuration

Use this to connect your iOS device through an IPsec VPN tunnel. Click Install to download and install the IPsec VPN client configuration on your iOS device.

SSL VPN client

Use this to connect your endpoint device through an SSL VPN connection. This section appears only when the administrator assigns a remote access SSL VPN policy to you. The configuration file is a .ovpn file.

Download and install the file from the following options:

  • Download client and configuration for Windows: Use this if you're installing the SSL VPN client for the first time. This is a legacy SSL VPN client. We recommend using the Sophos Connect client.
  • Download configuration for Windows: Use this if a client's already installed on your endpoint device.
  • Download configuration for other OSs
  • Download configuration for Android/iOS
Note You can use this .ovpn configuration file for both Sophos Connect and legacy SSL VPN clients.
Tip If you're using the .ovpn file, and SSL VPN tunnels that had connected earlier fail to connect now, download and import the file again and try to connect. You must do this if your administrator's made changes to the configuration. If you're using the provisioning (.pro) file instead, you don't need to update either of the files. The .pro file automatically pulls the changes.