Click and follow the prompts to complete the installation.
The latest version of Sophos Connect, 2.5.0 GA, brings numerous enhancements and improvements to the IPsec and SSL VPN client. Some of the key features and updates include:
can download the installer from the Sophos Firewall web console under Remote Access VPN > IPsec or SSL VPN .
: The installer continues to support standard 64-bit Windows platforms.
Automatically updates policies and connection settings when changes occur on the Sophos Firewall.
Sophos Connect is the next-generation VPN client designed to replace the legacy Sophos SSL VPN client (often referred to as "OpenVPN Connect" or the legacy "Sophos VPN Client"). Version 2.5.0 GA (General Availability) is a stable, production-ready release that consolidates two major VPN protocols into a single, lightweight agent:
The Sophos Connect icon will appear in the Windows system tray. Method B: Silent Command-Line Deployment
: Optimized for automated enterprise installation via GPO or SCCM.
Export the connection profile from the Sophos Firewall Web Admin console ( > Sophos Connect client ). The firewall generates an .scx file.
: Open Device Manager, expand Network Adapters , and uninstall any old TAP-Windows provider instances. Re-run the sslvpn.msi installer with administrative privileges to repair the driver stack. Security Best Practices for Remote Environments
Sophos Connect version (General Availability) is a platform release for the unified VPN client that supports both IPsec and SSL VPN connections on Windows . This version specifically introduces native support for 64-bit Windows ARM platforms, allowing the client to run on devices with ARM-based processors without emulation. Key Details of Version 2.5.0 Platform Expansion : Adds native support for Windows ARM64 .
Never rely solely on passwords. Pair your VPN profiles with Sophos OTP or Azure AD MFA.
"gateway": "://yourcompany.com", "user_portal_port": 443, "auto_connect": true, "can_save_credentials": true Use code with caution.
Understanding how Sophos Connect handles both protocols helps administrators decide which to prioritize for their user base. Network Layer (Network Layer Security) Transport Layer (TLS/SSL) Performance High throughput, lower overhead Slightly higher overhead due to TCP capsulation Port Requirements UDP 500, UDP 4500 Custom TCP/UDP port (Default: TCP 8443) Firewall Traversal Can be blocked by strict public Wi-Fi networks Highly adaptable, easily passes through firewalls Configuration File .pro or .scx .ovpn (Automatically imported via provisioning) Advanced Deployment via the sslvpn.msi Installer
msiexec.exe /i "sophosconnect 2.5.0 ga ipsec and sslvpn.msi" /qn /norestart Use code with caution. /i : Specifies the installation package.
Previous versions sometimes required separate downloads for IPSec vs. SSL. Version 2.5.0 GA delivers a single file that detects firewall configuration and activates the appropriate protocol stack dynamically.
Click and follow the prompts to complete the installation.
The latest version of Sophos Connect, 2.5.0 GA, brings numerous enhancements and improvements to the IPsec and SSL VPN client. Some of the key features and updates include:
can download the installer from the Sophos Firewall web console under Remote Access VPN > IPsec or SSL VPN .
: The installer continues to support standard 64-bit Windows platforms.
Automatically updates policies and connection settings when changes occur on the Sophos Firewall. sophosconnect 2.5.0 ga ipsec and sslvpn.msi
Sophos Connect is the next-generation VPN client designed to replace the legacy Sophos SSL VPN client (often referred to as "OpenVPN Connect" or the legacy "Sophos VPN Client"). Version 2.5.0 GA (General Availability) is a stable, production-ready release that consolidates two major VPN protocols into a single, lightweight agent:
The Sophos Connect icon will appear in the Windows system tray. Method B: Silent Command-Line Deployment
: Optimized for automated enterprise installation via GPO or SCCM.
Export the connection profile from the Sophos Firewall Web Admin console ( > Sophos Connect client ). The firewall generates an .scx file. Click and follow the prompts to complete the installation
: Open Device Manager, expand Network Adapters , and uninstall any old TAP-Windows provider instances. Re-run the sslvpn.msi installer with administrative privileges to repair the driver stack. Security Best Practices for Remote Environments
Sophos Connect version (General Availability) is a platform release for the unified VPN client that supports both IPsec and SSL VPN connections on Windows . This version specifically introduces native support for 64-bit Windows ARM platforms, allowing the client to run on devices with ARM-based processors without emulation. Key Details of Version 2.5.0 Platform Expansion : Adds native support for Windows ARM64 .
Never rely solely on passwords. Pair your VPN profiles with Sophos OTP or Azure AD MFA.
"gateway": "://yourcompany.com", "user_portal_port": 443, "auto_connect": true, "can_save_credentials": true Use code with caution. : The installer continues to support standard 64-bit
Understanding how Sophos Connect handles both protocols helps administrators decide which to prioritize for their user base. Network Layer (Network Layer Security) Transport Layer (TLS/SSL) Performance High throughput, lower overhead Slightly higher overhead due to TCP capsulation Port Requirements UDP 500, UDP 4500 Custom TCP/UDP port (Default: TCP 8443) Firewall Traversal Can be blocked by strict public Wi-Fi networks Highly adaptable, easily passes through firewalls Configuration File .pro or .scx .ovpn (Automatically imported via provisioning) Advanced Deployment via the sslvpn.msi Installer
msiexec.exe /i "sophosconnect 2.5.0 ga ipsec and sslvpn.msi" /qn /norestart Use code with caution. /i : Specifies the installation package.
Previous versions sometimes required separate downloads for IPSec vs. SSL. Version 2.5.0 GA delivers a single file that detects firewall configuration and activates the appropriate protocol stack dynamically.