Sophos Connect client

You can allow remote access to your network through the Sophos Connect client using an IPsec or SSL VPN connection.

The Sophos Connect client is VPN software that runs on Microsoft Windows 7 SP2 and later, and Mac OS 10.12 and later. It establishes highly secure, encrypted VPN tunnels for off-site employees.

Restriction You can establish SSL VPN connections with only version 2.0 of the Sophos Connect client. Currently, version 2.0 is only available for Windows.

You can update to the latest version of Sophos Connect client on Backup & Firmware > Pattern updates.

You can download the Sophos Connect client by clicking Download client on the IPsec (remote access) page. The download contains the following files:

  • Sophos Connect Admin (scadmin(legacy).msi): The application allows you to edit the .scx and .tgb configuration files used in IPsec remote access VPN. Alternatively, you can edit the configuration on the IPsec remote access page and export the connection.
  • Sophos Connect client software for macOS devices (Sophos Connect_1.4_(IPsec).pkg): It supports only IPsec remote access VPN. Users can download the client from the user portal.
  • Sophos Connect client software for Windows devices (SophosConnect_2.0_(IPsec_and_SSLVPN).msi): It supports both IPsec and SSL VPN. It also supports the provisioning file, which you configure separately. Users can download the client from the user portal.

Alternatively, you can provide the Sophos Connect client installation file to your users.

For instructions on how to set up the SSL connection, see Creating a remote access SSL VPN.

Users can import SSL VPN connections into the Sophos Connect client by double-clicking the provisioning (pro) file that you provide to them. Currently, the provisioning file doesn't import the IPsec remote access configuration files into the Sophos Connect client.

For legacy SSL VPN clients, users need to sign in to the user portal, download the ovpn file, and import it. For instructions on how to create the file and distribute it to users, see Sophos Connect provisioning file.