Skip to content

Import provisioning and configuration files

You can use a single provisioning file to automatically import remote access IPsec and SSL VPN connections and their updates.

Alternatively, you can use the corresponding configuration files for these connection types. You'll need to import the configuration files each time you make changes.

When you upgrade or migrate to Sophos Connect client

If you're migrating from a third-party client to the Sophos Connect client, users can import their existing configuration files to the client.


For IPsec, we recommend that you configure the advanced settings and share the provisioning file or the configuration file with users instead. These files allow you to share the advanced settings, which aren't available for third-party clients.

If you've updated the Sophos Connect client's version, the existing configuration files continue to work.

Restore or import configurations

If you restore a backup to the firewall or import configurations that affect remote access VPN connections, users must do as follows:

  • IPsec VPN: If there's a change in some remote access IPsec settings, such as the interface, authentication mechanism, and 2FA, users must reimport the configuration file to the VPN client.
  • SSL VPN: If there's a change in the port, protocol, interface, or server certificate in SSL VPN global settings, users must redownload the .ovpn configuration file from the VPN portal and import it to the VPN client.

Alternatively, if users have imported the provisioning (.pro) file with no change in the gateway address (gateway) and the VPN portal's port (user_portal_port), the file automatically pulls the remote access IPsec and SSL VPN configurations for the user. See Provisioning file templates.