Skip to content

Download client

You can download the authentication clients and server CA certificates for your endpoints. You can also download the SPX email encryption client.

When you sign in to the authentication clients, you're signed directly into the network.

Authentication clients and server CAs for computers

Download and install one of the following on your computer based on the operating system. The downloaded file contains the authentication client and the authentication server CA. Authentication clients use the CA to establish a TLS connection with Sophos Firewall for user authentication.

When you sign in to the client, you're signed directly into the network through Sophos Firewall.

  • Download for Windows
  • Download for MAC OS X
  • Download for Linux (32 bit)
  • Download for Linux (64 bit)

The client authentication agent supports the following operating systems:

  • Windows 10 and later
  • Linux: Ubuntu 16.4 and later
  • macOS Catalina (10.15) and later

Authentication server CA for Android and iOS devices

Sophos Network Agent is an authentication client. It enables Sophos Firewall to authenticate local network users using mobile devices running Android and iOS devices.


You must first download Sophos Network Agent from Play Store or App Store depending on your endpoint.

Download certificate for iOS 12 and earlier and Android client: If you have an Android or iOS 12 and earlier device, download and install this authentication server CA certificate on your mobile device. For more information about how to do this, see Use Sophos Network Agent for Android and iOS 12 and earlier.

Install client certificate in iOS 13 and later: This installer contains the authentication server CA certificate for iOS 13 and later devices. Do as follows:

  1. If your administrator has shared a signing CA certificate with you, install the signing CA (Default CA) on your mobile device and turn on trust for the CA. For more information about how to do this, see Use Sophos Network Agent for iOS 13 devices.

  2. Click the link on the user portal to import the authentication server CA for authentication directly to your iOS 13 device.

The client authentication agent supports the following operating systems:

  • iOS 8.0 and later
  • Android 4.1 and later

SPX add-in

This feature is available only with a valid Email Protection subscription

This feature is available in Sophos Firewall Models XG 105 and later and all Sophos UTM Models.

Click Download Sophos Outlook Add-in to download and install the SPX add-in. The SPX add-in simplifies the encryption of messages that contain sensitive or confidential information leaving the organization. The add-in integrates seamlessly with the user's Microsoft Outlook software, making it easy for users to encrypt messages through Sophos Firewall Email Protection.

Do as follows to install the add-in in Microsoft Outlook:

  1. Unzip the files to a temporary folder.
  2. For an interactive install, run setup.exe (users will be prompted for input).
  3. For an unattended install, run the installer with the following parameters:

    msiexec /qr /i SophosOutlookAddInSetup.msi T=1 EC=3 C=1 I=1