Sophos Connect client
Users can establish remote access IPsec and SSL VPN connections to your network using the Sophos Connect client.
To update to the latest version of the Sophos Connect client, go to Backup & Firmware > Pattern updates.
Downloading the client
Users can download the Sophos Connect client from the user portal. Alternatively, you can download the client from the web admin console and share it with users. To download the client, go to VPN > IPsec (remote access) and click Download client. The download contains the following files:
- Sophos Connect client software for macOS devices (
Sophos Connect_x.x_(IPsec).pkg): It supports only IPsec remote access VPN. - Sophos Connect client software for Windows devices (
SophosConnect_x.x_(IPsec_and_SSLVPN).msi): It supports both IPsec and SSL VPN. It also supports the provisioning file, which you configure separately. - Sophos Connect Admin (
scadmin(legacy).msi): For versions 18.0 MR3 and earlier, you can use this application to edit the IPsec remote access configuration files. For versions 18.0 MR4 and later, you can make the changes on the IPsec remote access page. You can't use this application to edit the.ovpnfile.
Importing configuration and provisioning files
SSL VPN: Users can import SSL VPN connections into the Sophos Connect client by double-clicking the .pro provisioning file that you provide to them. Alternatively, users can download the .ovpn configuration file from the user portal.
IPsec: You can use the provisioning file for IPsec remote access connections. Alternatively, IPsec remote access users can import the .scx configuration file that you provide to them.
See Sophos Connect provisioning file.
Sophos Connect client: Compatibility with platforms
You can establish IPsec and SSL VPN tunnels using the Sophos Connect client on some endpoint platforms and versions. Check the platform version of your endpoint to see if you can use the Sophos Connect client.
Note
Currently, the Sophos Connect client doesn't support macOS for SSL VPN. It also doesn't support mobile platforms for IPsec and SSL VPN.
You can use the provisioning file to enable users to automatically import remote access configurations into the Sophos Connect client. Make sure you use a compatible version of the Sophos Connect client. For details, see the following table:
| IPsec VPN* | SSL VPN | |||
|---|---|---|---|---|
| Sophos Connect client version | Configuration file 1.0 and later | Provisioning file 2.1 and later | Configuration file 2.0 and later | Provisioning file 2.0 and later |
| Windows (x86) | Yes Windows 10, 11 | Yes Windows 10, 11 | Yes Windows 10, 11 | Yes Windows 10, 11 |
| Windows (ARM) | No | No | No | No |
| macOS (x86) | Yes macOS 10.13 and later | No | No Recommended: OpenVPN Connect client | No |
| macOS (ARM) | No | No | No Recommended: OpenVPN Connect client | No |
| Android | No Use third-party clients. | No | No Recommended: OpenVPN Connect client | No |
| iOS | No Use third-party clients. | No | No Recommended: OpenVPN Connect client | No |
* You can establish remote access IPsec VPN connections using the configuration file on earlier versions of the Sophos Connect client. However, if you want to use the provisioning file, you must use a later version of the client.
More resources