Skip to content

Sophos Connect client

Users can establish remote access IPsec and SSL VPN connections to your network using the Sophos Connect client.

To update to the latest version of the Sophos Connect client, go to Backup & Firmware > Pattern updates.

Downloading the client

Users can download the Sophos Connect client from the user portal. Alternatively, you can download the client from the web admin console and share it with users. To download the client, go to VPN > IPsec (remote access) and click Download client. The download contains the following files:

  • Sophos Connect client software for macOS devices (Sophos Connect_x.x_(IPsec).pkg): It supports only IPsec remote access VPN.
  • Sophos Connect client software for Windows devices (SophosConnect_x.x_(IPsec_and_SSLVPN).msi): It supports both IPsec and SSL VPN. It also supports the provisioning file, which you configure separately.
  • Sophos Connect Admin (scadmin(legacy).msi): For versions 18.0 MR3 and earlier, you can use this application to edit the IPsec remote access configuration files. For versions 18.0 MR4 and later, you can make the changes on the IPsec remote access page. You can't use this application to edit the .ovpn file.

Importing configuration and provisioning files

SSL VPN: Users can import SSL VPN connections into the Sophos Connect client by double-clicking the .pro provisioning file that you provide to them. Alternatively, users can download the .ovpn configuration file from the user portal.

IPsec: You can use the provisioning file for IPsec remote access connections. Alternatively, IPsec remote access users can import the .scx configuration file that you provide to them.

See Sophos Connect provisioning file.

Sophos Connect client: Compatibility with platforms

You can establish IPsec and SSL VPN tunnels using the Sophos Connect client on some endpoint platforms and versions. Check the platform version of your endpoint to see if you can use the Sophos Connect client.

Note

Currently, the Sophos Connect client doesn't support macOS for SSL VPN. It also doesn't support mobile platforms for IPsec and SSL VPN.

You can use the provisioning file to enable users to automatically import remote access configurations into the Sophos Connect client. Make sure you use a compatible version of the Sophos Connect client. For details, see the following table:

IPsec VPN* SSL VPN
Sophos Connect client version Configuration file
1.0 and later
Provisioning file
2.1 and later
Configuration file
2.0 and later
Provisioning file
2.0 and later
Windows (x86) Yes
Windows 10, 11
Yes
Windows 10, 11
Yes
Windows 10, 11
Yes
Windows 10, 11
Windows (ARM) No No No No
macOS (x86) Yes
macOS 10.13 and later
No No
Recommended: OpenVPN Connect client
No
macOS (ARM) No No No
Recommended: OpenVPN Connect client
No
Android No
Use third-party clients.
No No
Recommended: OpenVPN Connect client
No
iOS No
Use third-party clients.
No No
Recommended: OpenVPN Connect client
No

* You can establish remote access IPsec VPN connections using the configuration file on earlier versions of the Sophos Connect client. However, if you want to use the provisioning file, you must use a later version of the client.

More resources