Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Use Sophos Network Agent for iOS 12 and Android devices

Sophos Network Agent enables Sophos Firewall to authenticate local network users using mobile devices running iOS 12 and earlier, and Android.

Warning

Sophos Network Agent reached End of Life (EOL) on September 1, 2023.

To set up strict authentication for unauthenticated users, select Use web authentication for unknown users in the firewall rule.

Additionally, go to Authentication > Web authentication. Under Authorize unauthenticated users for web access, select Show captive portal link. The captive portal page requires unauthenticated users to sign in.

Introduction

Sophos Network Agent is an authentication client. When users sign in to it, they are signed directly into the network. It needs the authentication server CA to establish a TLS connection with Sophos Firewall.

Users must download the authentication server CA certificate and import it into the client. They must do as follows:

  1. Download Sophos Network Agent.
  2. Download the authentication server CA certificate from the user portal.
  3. Import the authentication server CA to Sophos Network Agent.

Import authentication server CA for iOS 12 and Android devices

Users must sign in to the user portal and download the authentication server CA certificate for mobile devices running iOS 12 and earlier, and Android. They must do as follows:

  1. Download and install Sophos Network Agent from the following stores:

  2. On your mobile device, browse to the user portal and sign in.

  3. Go to Download client > Authentication clients and click Download certificate for iOS 12 and earlier and Android to download the authentication server CA certificate.

    Here's an example:

    Download client certificate for iOS 12 and Android devices.

  4. Enter your passcode.

  5. Open Sophos Network Agent, import the CA certificate you've downloaded from the user portal, and click Yes.

    Here's an example:

    Import certificate into trust store.

  6. Sign in to Sophos Network Agent.

    Sign in to Sophos Network Agent.

    Sophos Firewall now signs you into the network.

    Tip

    When your iOS device is locked or loses internet connectivity, you may be signed out of Sophos Network Agent. Open the client and sign in again.