Sophos UTM on AWS Administration Guide
Depending on the security policy of your organization and the requirements of your network, you might have to make additional settings.
After configuring the VPN server (headquarter), remote users must configure their devices.