Skip to content

Import provisioning and configuration files

You can use a single provisioning file to automatically import remote access IPsec and SSL VPN connections and their updates.

Alternatively, you can use the corresponding configuration files for these connection types. You'll need to import the configuration files each time you make changes.

When you upgrade or migrate to Sophos Connect client

If you're migrating from a third-party client to the Sophos Connect client, users can import their existing configuration files to the client.


For IPsec, we recommend that you configure the advanced settings and share the provisioning file or the configuration file with users instead. These files allow you to share the advanced settings, which aren't available for third-party clients.

If you've updated the Sophos Connect client's version, the existing configuration files continue to work.


If you restore a backup to the firewall, it replaces the firewall's existing configuration. So, when you replace a firewall, and restore the old firewall's backup, users can continue to use the existing VPN configuration files. If the backup is restored to another firewall, users must use the new configuration files (.scx and .ovpn). Alternatively, you can share the .pro file with them.


If you import SSL VPN or IPsec configurations using Backup and firmware > Import export, users must use the new configuration files (.scx and .ovpn). Alternatively, you can first configure and share the provisioning file (.pro) with them. The file fetches all the details the client needs, such as certificates, to establish the remote access connection. See Provisioning file templates.