Sophos connect client download

Want to allow remote users to access these zones in this example. Enter a name. Specify the source and destination zones as follows and click Apply: Name Example settings Source zones VPN Destination zones LANDMZ Here's an example: Note Under advanced settings for IPsec (remote access), if you select Use as default gateway, the Sophos Connect client sends all traffic, including traffic to the internet, from the remote user through the tunnel. To allow this traffic, you must additionally set the Destination zone to WAN in the firewall rule. Allow access to services You must allow access to services, such as the user portal and ping from VPN. Go to Administration > Device access. Select the checkbox under User portal for the following: WAN Wi-Fi This allows users to sign in to the user portal and download the Sophos Connect client. We recommend that you only allow temporary access from the WAN. Select the checkboxes for VPN under the following: User portal: Allows remote users to access the user portal through VPN. Optional: DNS: Allows remote users to resolve domain names through VPN if you've specified DNS resolution through the firewall. Optional: Ping/Ping6: Allows remote users to check VPN connectivity with the firewall. Click Apply. Configure Sophos Connect client on endpoint devices Users must install the Sophos Connect client on their endpoint devices and import the .scx file to the client. You can download the Sophos Connect client installers from the Sophos Firewall web admin console and share these with users. Alternatively, users can download the Sophos Connect client from the user portal as follows: Sign in to the user portal. Click VPN. Under Sophos Connect client, click one of the following options: Download for Windows Download for macOS Click the downloaded Sophos Connect client. You can then see it in the system tray of your endpoint device. Click the three dots button in the upper-right corner, click Import connection, and select the .scx file your administrator has sent. Sign in using your user portal credentials. Enter the verification code if two-factor authentication is required. IPsec remote access connection will be established between the client and Sophos Firewall.

VPN and user portals VPN portal Remote access VPN Always use the following permalink when referencing this page. It will remain unchanged in future help versions. You can establish a remote access IPsec VPN connection between your endpoint and your organization's network. You must download the Sophos Connect client. Import the IPsec configuration file your administrator provides. Supported endpoints You can use the Sophos Connect client to establish the connection from the following endpoints: Windows 10 and 11 devices macOS 10.13 and later You can't use the Sophos Connect client to establish the connection from the following endpoints: Linux devices Mobile devices You can use a third-party VPN client for these endpoints. Windows and macOSiOS You can establish remote access IPsec VPN connections between your Windows or macOS device and your organization's network. Download the Sophos Connect client Sign in to the VPN portal. Go to VPN. Under Sophos Connect client, do as follows: Windows devices: Click Download for Windows. macOS devices: Click Download for macOS. Click the downloaded file to install the Sophos Connect client on your device. You can see the client on your desktop. Double-click the client. You can then see it in the tray in the lower-right corner for Windows and the upper-right corner for macOS devices. Import the configuration file to the client Your administrator will share the `.scx' configuration file with you. Click the Sophos Connect client in the tray on your endpoint and click Import connection. Select the .scx configuration file your administrator has shared with you. Here's an example of a connection: Click Connect to sign in. Enter your VPN portal credentials. Enter the verification code if you're prompted for two-factor authentication. Click Sign in. This establishes the remote access IPsec VPN connection. Future connections are established automatically. Tip If tunnels that

Always use the following permalink when referencing this page. It will remain unchanged in future help versions. You can enable remote users to connect to the network securely over the internet using remote access SSL VPN connections. Users can establish IPv4 and IPv6 SSL VPN connections. These connections use OpenVPN. Remote access requires digital certificates and a username and password. Go to Remote access VPN > SSL VPN. Click SSL VPN global settings to specify settings for all remote access SSL VPN policies. See SSL VPN global settings. Click Add to create an SSL VPN remote access policy. Alternatively, click Assistant to launch the SSL VPN remote access assistant and configure the policy. Additionally, you can do the following: Click Logs to see the logs. Click Download client to download the Sophos Connect client and share it with users. Alternatively, users can download the client from the user portal. Currently, the Sophos Connect client doesn't support some endpoint devices. See Compatibility with Sophos Connect client. Warning The legacy SSL VPN client reached end-of-life. It doesn't appear for download on the user portal any longer. Configure remote access SSL VPN connections To allow remote access to your network through the Sophos Connect client using an SSL connection, do as follows: Go to Remote access VPN > SSL VPN. Click SSL VPN global settings, specify the settings, and click Apply. Go to SSL VPN and add preconfigured users and groups. This creates a .ovpn configuration file, which appears on the user portal

This discussion has been locked. You can no longer post new replies to this discussion. If you have a question you can start a new discussion Ch Waxenberger over 4 years ago Hello,how can i download the ssl vpn config for other users in the admin control center to prepare a notebook for multiple users?I'm using a XG135 with SFOS 18.0.3.Thanks a lot. This thread was automatically locked due to age. Cancel 0 FormerMember over 4 years ago Hi Ch Waxenberger,Thank you for reaching out to the Community! Check out the following documents; consider using Connect Client 2.0 to leverage the bulk deployment feature with the provisioning file.Release note and download: document: file: Cancel Vote Up 0 Vote Down Cancel 0 Ch Waxenberger over 4 years ago in reply to FormerMember Hi ,thank you for the suggestion.That was my first approach to solve the problem but with sophos connect client i have the problem that rdp connections are not reliable as discussed here: the moment i switch back to ssl vpn and hope for sophos fixing the rdp problems with sophos connect.Greets Christian Cancel Vote Up 0 Vote Down Cancel

Always use the following permalink when referencing this page. It will remain unchanged in future help versions. You can configure IPsec remote access connections. Users can establish the connection using the Sophos Connect client. Introduction To configure and establish IPsec remote access connections over the Sophos Connect client, do as follows: Optional: Generate a locally-signed certificate. Configure the IPsec remote access connection. Send the configuration file to users. Optional: Assign a static IP address to a user Add a firewall rule. Allow access to services. Send the Sophos Connect client to users. Alternatively, users can download it from the user portal. Users must do as follows: Install the Sophos Connect client on their endpoint devices. Import the configuration file into the client and establish the connection. Note IPsec remote access VPN doesn't support connections from the LAN zone. Configure a locally-signed certificate Go to Certificates > Certificates and click Add. Select Generate locally-signed certificate. Alternatively, you can select Upload certificate if you have one. Specify the Certificate details for the locally-signed certificate. Here's an example: Specify the Subject Name attributes. Here's an example: Under Subject Alternative Names, enter a DNS name or IP address and click the add (+) button. Here's an example: Configure remote access IPsec Specify the settings for IPsec remote access connections. Go to Remote access VPN > IPsec and click Enable. Specify the general settings. Name Example settings Interface 203.0.113.1 Select a WAN port. IPsec profile DefaultRemoteAccessYou can only select IKEv1 profiles with Dead Peer Detection (DPD) turned off or set to Disconnect. Authentication type Digital certificate Local certificate Appliance certificate Remote certificate TestCert Select a locally-signed certificate. Alternatively, select a certificate you've uploaded to Certificates > Certificates. Local ID The firewall automatically selects the local ID for digital certificates. Make sure you've configured a certificate ID for the certificate. Remote ID Make sure you've configured a certificate ID for the certificate. Allowed users and groups TestGroup Specify the client information. Here's an example: Name Example settings Name TestRemoteAccessVPN Assign IP from 192.168.1.11192.168.1.254 DNS server 1 192.168.1.5 Specify the advanced settings you want and click Apply. Name Example settings Permitted network resources (IPv4) LAN_10.1.1.0DMZ_192.168.2.0 Send Security Heartbeat through tunnel Sends the Security Heartbeat of remote clients through the tunnel. Allow users to save username and password Users can save their credentials. Here's an example: Click Export connection at the bottom of the page. The exported tar.gz file contains a .scx file and a .tgb file. Send the .scx file to users. Optionally, download the client and send it to users. Optional: Assign a static IP address to a user To assign a static IP address to a user connecting through the Sophos Connect client, do as follows: Go to Authentication > Users, and select the user. On the user's settings page, go down to IPsec remote access, click Enable, and enter an IP address. Here's an example: Add a firewall rule Configure a firewall rule to allow traffic from VPN to LAN and DMZ since you

This discussion has been locked. You can no longer post new replies to this discussion. If you have a question you can start a new discussion Is anyone else having issues with download/Upload speed with Sophos Connect using a Full Tunnel configuration? I only hit around 15mb/down and up. I've spoken to Sophos and was told there will be a performance fix in July, but I find it hard to believe that everyone who's using this software is getting that slow of a speed and not complaining. Please help me fix this issue.It happens with both Windows and Mac and I tried with a shared key and a certificate. Thanks!! This thread was automatically locked due to age. Hi BrianTesoroniCould you please PM us the service request number you have opened with the technical support? We will check the service request further to get details of the reported issue. may also be helpful to know latency in both directions between vpn client and xg wan interface ip + throughput test results for a lan/dmz client behind the xg through the same wan interface. So my home internet is 1gb download and the office internet is 200mb. When I connect using pptp or L2TP I get around 100mb down/up, SSL VPN I get 35mb down/up, AND Sophos connect I get 15mb down/up. When I'm on the LAN I could get little over 100mb wireless. Hello Brian,SC 2. EAP1 client available today can do both IPsec and SSL VPN. So please upgrade SC 1.4 if you have not done it already. You have to uninstall the SSL VPN client before you can upgrade to SC 2.0. Then try it SC with SSL VPN. Please let us know the results.Ramesh