Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=vpn-portal-remote-access-ipsec-vpn

IPsec VPN

You can establish a remote access IPsec VPN connection between your endpoint and your organization's network.

You must download the Sophos Connect client. Import the IPsec configuration file your administrator provides.

Supported endpoints

You can use the Sophos Connect client to establish the connection from the following endpoints:

  • Windows 10 and 11 devices
  • macOS 10.13 and later

You can't use the Sophos Connect client to establish the connection from the following endpoints:

  • Linux devices
  • Mobile devices

You can use a third-party VPN client for these endpoints.

You can establish remote access IPsec VPN connections between your Windows or macOS device and your organization's network.

Download the Sophos Connect client

  1. Sign in to the VPN portal.
  2. Go to VPN.

  3. Under Sophos Connect client, do as follows:

    • Windows devices: Click Download for Windows.
    • macOS devices: Click Download for macOS.

    Download Sophos Connect client.

  4. Click the downloaded file to install the Sophos Connect client on your device.

    You can see the client on your desktop.

  5. Double-click the client.

    You can then see it in the tray in the lower-right corner for Windows and the upper-right corner for macOS devices.

    Sophos Connect client in tray.

Import the configuration file to the client

Your administrator will share the `.scx' configuration file with you.

  1. Click the Sophos Connect client in the tray on your endpoint and click Import connection.

    Import the connection.

  2. Select the .scx configuration file your administrator has shared with you.

    Here's an example of a connection:

    VPN connection.

  3. Click Connect to sign in.

    Click connect.

  4. Enter your VPN portal credentials.

    Sign in to connect.

  5. Enter the verification code if you're prompted for two-factor authentication.

  6. Click Sign in.

This establishes the remote access IPsec VPN connection. Future connections are established automatically.

Tip

If tunnels that had connected earlier don't connect later, your administrator may have made changes to the configuration file. Ask for the new file, and import it to the Sophos Connect client.

You can establish remote access IPsec VPN connections between your iOS device and your organization's network.

Establish the connection

  1. On your iOS device, open the Safari browser, and sign in to the VPN portal.
  2. Go to VPN.

  3. Under VPN configuration > IPsec VPN profile, click Download for iOS.

    Install IPsec VPN configuration on iOS devices.

The IPsec VPN is automatically established.

Note

You can only see the iOS IPsec download if your administrator has configured remote access IPsec VPN.

Tip

Install the configuration again if tunnels that had connected earlier don't connect later.

You must do this if your administrator has made configuration changes.

Close the VPN connection

To close the VPN connection, do as follows:

  1. On the iOS device, tap Settings.
  2. Go to General > VPN.
  3. Tap Status for your connection.

Your VPN connection will close.