Skip to content


You can download remote access IPsec and SSL VPN clients to your Windows, macOS, and iOS devices.

You can download these clients to endpoint devices, such as computers, tablets, and smartphones. You can also use the clientless access connection if it's configured for you.

Use these clients to connect your endpoint devices to the permitted resources within your organization's network. All traffic or only network-destined traffic from your device flows through the tunnel. It's based on the setting your network administrator specifies.

Sophos Connect client (IPsec and SSL VPN)

Do as follows to connect your endpoint devices to the network using the Sophos Connect client:

  1. Click Download client for Windows or Download client for macOS.
  2. Install the client on your endpoint device.
  3. To use the tunnel, sign in to the client using your user portal credentials.
  4. Enter the verification code if you're prompted for two-factor authentication.
  5. On the Sophos Connect client, click the three dots button in the upper right corner and click Import connection to import the files. Do as follows:

    • IPsec VPN connections: Double-click the .pro file your administrator shares with you to automatically import the .scx file. Alternatively, import the .scx file your administrator shares with you.
    • SSL VPN connections: Double-click the .pro file your administrator shares with you to automatically import the .ovpn configuration file to the Sophos Connect client.

      If the administrator doesn't share the provisioning file, move down on the VPN page to the SSL VPN client section. Download the .ovpn file and import it into the Sophos Connect client. The section only appears if your administrator has configured an SSL VPN remote access policy for you.


    Currently, the Sophos Connect client doesn't support macOS for SSL VPN. It also doesn't support mobile platforms for IPsec and SSL VPN. For macOS and mobile platforms, we recommend that you use the OpenVPN Connect client.


    The Sophos Connect client 2.0 and later versions are available for SSL VPN connections on Windows 8.1 and Windows 10 devices. Users of macOS, Windows 7 SP2, and Windows 8 platforms can continue to use the legacy SSL VPN client.

    Import connection to Sophos Connect client

Apple iOS IPsec VPN client configuration

Use this to connect your iOS device through an IPsec VPN tunnel. Click Install to download and install the IPsec VPN client configuration on your iOS device.

SSL VPN client

Use this to connect your endpoint device through an SSL VPN connection. This section appears only when the administrator assigns a remote access SSL VPN policy to you. The configuration file is a .ovpn file.

Download and install the file from the following options:

  • Download client and configuration for Windows: Use this if you're installing the SSL VPN client for the first time. This is a legacy SSL VPN client. We recommend using the Sophos Connect client.
  • Download configuration for Windows: Use this if a client's already installed on your endpoint device.
  • Download configuration for other OSs
  • Download configuration for Android/iOS


You can use this .ovpn configuration file for both Sophos Connect and legacy SSL VPN clients.


If you're using the .ovpn file, and SSL VPN tunnels that had connected earlier fail to connect now, download and import the file again and try to connect. You must do this if your administrator's made changes to the configuration. If you're using the provisioning (.pro) file instead, you don't need to update either of the files. The .pro file automatically pulls the changes.

More resources

Back to top