VPN

You can download remote access IPsec and SSL VPN clients to your Windows, macOS, and iOS devices.

You can download these clients to endpoint devices, such as computers, tablets, and smartphones. You can also use the clientless access connection if it's configured for you.

Use these clients to connect your endpoint devices to the permitted resources within your organization's network. All traffic or only network-destined traffic from your device flows through the tunnel. It's based on the setting your network administrator specifies.

Sophos Connect client (IPsec and SSL VPN)

Do as follows to connect your endpoint devices to the network using the Sophos Connect client:

  1. Click Download client for Windows or Download client for macOS.
  2. Install the client on your endpoint device.
  3. To use the tunnel, sign in to the client using your user portal credentials.
  4. Enter the verification code if you're prompted for two-factor authentication.
  5. Double-click the .pro provisioning file your administrator shares with you to automatically import the .scx or the .ovpn configuration file to the Sophos Connect client. It's a one-time action because the provisioning file automatically updates your configuration files when the administrator makes changes later.
  6. Alternatively, you can import the configuration files. On the Sophos Connect client, click the three dots button in the upper-right corner and click Import connection to import the files. Do as follows:
    • IPsec VPN connections: Double-click the .pro file your administrator shares with you to automatically import the .scx file. Alternatively, import the .scx file your administrator shares with you.
    • SSL VPN connections: Double-click the .pro file your administrator shares with you to automatically import the .ovpn configuration file to the Sophos Connect client.

      If the administrator doesn't share the provisioning file, scroll down the VPN page to the SSL VPN client section. Download the .ovpn file and import it into the Sophos Connect client. The section only appears if your administrator has configured an SSL VPN remote access policy for you.

    Tip If you've imported the .scx or the .ovpn file, and the tunnels that had connected earlier fail to connect now, your administrator may have made changes to the configuration. Download and import the file again, and try to establish the connection. If you're using the provisioning (.pro) file instead, you don't need to update either file. The .pro file automatically imports the changes.
    Restriction Currently, the Sophos Connect client doesn't support macOS for SSL VPN. It also doesn't support mobile platforms for IPsec and SSL VPN. For macOS and mobile platforms, we recommend that you use the OpenVPN Connect client.
    Restriction The Sophos Connect client 2.0 and later versions are available for SSL VPN connections on Windows 8.1 and Windows 10 devices. macOS, Windows 7 SP2, and Windows 8 users can continue to use the legacy SSL VPN client.

    Import connection to Sophos Connect client

Apple iOS IPsec VPN client configuration

Use this to connect your iOS device through an IPsec VPN tunnel. Click Install to download and install the IPsec VPN client configuration on your iOS device.

SSL VPN client

Use this to connect your endpoint device through an SSL VPN connection. This section appears only when the administrator assigns a remote access SSL VPN policy to you. The configuration file is a .ovpn file.

Download and install the file from the following options:

  • Download client and configuration for Windows: Use this if you're installing the SSL VPN client for the first time. This is a legacy SSL VPN client. We recommend using the Sophos Connect client.
  • Download configuration for Windows: Use this if a client's already installed on your endpoint device.
  • Download configuration for other OSs
  • Download configuration for Android/iOS
Note You can use this .ovpn configuration file for both the Sophos Connect and the legacy SSL VPN clients.