Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=remote-access-VPN-Sophos-Connect-client

Sophos Connect client

Users can establish remote access IPsec and SSL VPN connections to your network using the Sophos Connect client.

To update to the latest version of the Sophos Connect client, go to Backup & Firmware > Pattern updates.

Download the client

Users can download the Sophos Connect client from the VPN portal. Alternatively, you can download the client from the web admin console and share it with users. To download the client, go to Remote access VPN > IPsec or SSL VPN and click Download client. You can share the following Sophos Connect client software files with users:

  • macOS devices (Sophos Connect_x.x_(IPsec).pkg): It supports only IPsec remote access VPN.
  • Windows devices (SophosConnect_x.x_(IPsec_and_SSLVPN).msi): It supports both IPsec and SSL VPN. It also supports the provisioning file, which you configure separately.

Import configuration and provisioning files

SSL VPN: Users can import SSL VPN connections into the Sophos Connect client by double-clicking the .pro provisioning file that you provide to them. Alternatively, users can download the .ovpn configuration file from the VPN portal.

IPsec: You can use the provisioning file for IPsec remote access connections. Alternatively, IPsec remote access users can import the .scx configuration file that you provide to them.

See Provisioning file templates.

Connection behavior

The Sophos Connect client connects to the remote gateways listed in the .ovpn configuration file in reverse order of priority. Dynamic DNS gateways take priority over WAN IP address gateways in the list.

Example

Sophos Connect remote gateways.

In this .ovpn configuration file, the Sophos Connect client first connects to 5g.vpn.sophosexample.example.net. If the connection fails, it then attempts to connect to the next available gateway in reverse order, starting with vpn.sophosexample.example.net and so on.

Sophos Connect client: Compatibility with platforms

You can establish IPsec and SSL VPN tunnels using the Sophos Connect client on some endpoint platforms and versions. Check the platform version of your endpoint to see if you can use the Sophos Connect client.

Note

The Sophos Connect client supports Windows 10 and 11, including LTSB and LTSC. It also supports macOS 10.13 and later.

For more information, see Supported platforms in Sophos Connect release notes.

Videos

More resources