Skip to content


You can download the Sophos Connect client to your to endpoint devices to establish remote access IPsec and SSL VPN connections.

You can also use the clientless access connection if it's configured for you.

Use the Sophos Connect client client to connect your endpoint devices to the permitted resources within your organization's network. All traffic or only network-destined traffic from your device flows through the tunnel. It's based on the setting your network administrator specifies.

Sophos Connect client

Do as follows to connect your endpoint devices to the network using the Sophos Connect client:

  1. Click Download for Windows or Download for macOS.
  2. Install the client on your endpoint device.
  3. To use the tunnel, sign in to the client using your user portal credentials.
  4. Enter the verification code if you're prompted for multi-factor authentication.
  5. On the Sophos Connect client, click the three dots button in the upper right corner and click Import connection to import the files. Do as follows:

    • IPsec: Double-click the .pro file your administrator shares with you to automatically import the .scx file. Alternatively, import the .scx file your administrator shares with you.

      For iOS devices, you must download and install the IPsec configuration file directly from the user portal.

    • SSL VPN: Double-click the .pro file your administrator shares with you to automatically import the .ovpn configuration file to the Sophos Connect client.

      If the administrator doesn't share the provisioning file, click the configuration file you want under VPN configuration. Download the .ovpn file and import it into the Sophos Connect client.

      The configuration files only appear if your administrator has configured the corresponding remote access IPsec or SSL VPN remote access policy for you.


    Currently, the Sophos Connect client doesn't support macOS for SSL VPN. For macOS, we recommend that you use the OpenVPN Connect client.

    The Sophos Connect client doesn't support mobile platforms for IPsec and SSL VPN.

    Import connection to Sophos Connect client.

VPN configuration

The SSL VPN configuration files for download show up only when the administrator assigns a remote access SSL VPN policy to you. The configuration files are .ovpn files.

Download and install the file from the following options:

  • Download for Windows, macOS, Linux
  • Download for Android and iOS


You can use this .ovpn configuration file for Sophos Connect and other SSL VPN clients.


If you're using the .ovpn file, and SSL VPN tunnels that had connected earlier fail to connect now, download and import the file again and try to connect. You must do this if your administrator's made changes to the configuration.

If you're using the provisioning (.pro) file instead, you don't need to update either of the files. The .pro file automatically pulls the changes.

More resources