Adding new users to Connect policy drops all connections.

Global changes under xg >> vpn >> Sophos Connect Client will result in all clients disconnecting when it reactivates for the changes.  User changes should be made under xg >> authentication >> users >> (username) >> Sophos Connect Client >> enable/disable.  This updates the user roster without impact to existing sessions.

This can't be done efficiently for 350 users unless I'm missing something.

This can't be done efficiently for 350 users unless I'm missing something.

I haven't tried API in this area but it could be worth looking into: community.sophos.com/.../132560