Sophos Connect client DNS issues with IOS devices

PS: It is not Sophos Connect. 

I am not quite sure, what you are testing. Can you share a Screenshot of the iOS Phone? 

Hi,

On the XG i have setup the section with Sophos Connect, i believe there is currently issue with the certificate side of things hence i am currently testing with preshared key.

I have then downloaded the client from the user portal for the IOS device.

"Configuration for IPsec VPN client for Apple iOS"

The above installs a profile on the IOS device with the VPN settings.

Let me know if you require further info.

Thanks

Are you talking about this KBA? 

https://community.sophos.com/kb/en-us/123137

Because this is kinda outdated: 

Cisco VPN Client for Apple iOS is not available for iOS versions 6 or higher.

Can you share some screenshots of your current solution? You are using the Onboard IPsec Client? 

Hi,

No i have never used that setup.  See attached screenshot of the portal which is something that has been recently added re. configuration for IPSec VPN client for Apple IOS.  

The configuration is linked to the Sophos Connect Client settings on the XG portal.  I have just setup the client settings and downloaded this settings via the portal which in turn installed a profile from Sophos with the IPSec settings. 

I cant view or edit this being installed through a profile other than confirm its name and the IP it is trying to connect to.

Hi waghelak,

Sophos Connect Client is for Windows 7 and above and MacOS machines. We do not have our own IPSEC client for IOS and android. The configuration you have referred is aligened with Cisco connect.

https://news.sophos.com/en-us/2016/05/13/xg-firewall-how-to-video-configure-an-ipsec-vpn-on-an-iphone/

I would recommend you to configure with pre-shared key and the configuration file provided is no longer feasible to the current Cisco Anyconnect.

 We have removed Cisco Anyconnnect from  17.5 GA and you would need to configure usign L2TP IPsec connection.

Hi waghelak,

Sophos Connect Client is for Windows 7 and above and MacOS machines. We do not have our own IPSEC client for IOS and android. The configuration you have referred is aligened with Cisco connect.

https://news.sophos.com/en-us/2016/05/13/xg-firewall-how-to-video-configure-an-ipsec-vpn-on-an-iphone/

I would recommend you to configure with pre-shared key and the configuration file provided is no longer feasible to the current Cisco Anyconnect.

 We have removed Cisco Anyconnnect from  17.5 GA and you would need to configure usign L2TP IPsec connection.

Hi Aditya

I am not sure i am following you, either Sophos are not aware what they supporting or i am confused.

I am again repeating myself i have configured the VPN setup on the Sophos Connect client and i am downloading the setup using the Sophos XG user portal as shown in the attached in previous message.

Surely if this is not supported maybe the portal should remove option to download this setup on the IOS device.

Everything works as expected other than DNS.

Thanks