Sophos Connect Client auto logon

Hi Regex,

Thank you for reaching out to the Community! 

Yes, it is supported according to the release notes: 

1. SSL VPN support for Windows
2. Bulk Deployment of SSL VPN config via new provisioning file
3. The same convenience features you expect in Sophos Connect for IPsec
   
   • OTP prompt support
   • Improved DUO MFA support (when connecting to XGv18)
   • Auto-Connect
   • Logon script execution on connect
   • Remote gateway availability probing
4. Automatic re-fetch latest user policy if SSL policy updated on the firewall (when using provisioning file to deploy)
5. The manual re-fetch the latest policy
6. Automatic failover to next firewall WAN link when one link fails
7. File extension association for policy files - Import a policy file into Sophos Connect just by double-clicking it in Windows Explorer or opening the file attached in an email

Check out the following documents for more info: 

• Sophos Connect 2.0 is now GA
• Sophos Connect provisioning file

Thanks,

Well so maybe im blind cuz i dont see such option. Im importing OVPN file and thats all. 

Well so maybe im blind cuz i dont see such option. Im importing OVPN file and thats all. 

Hi Regex,

I would suggest you check the Sophos Connect provision file document one more time which includes a sample provision file. 

In your case, you have to set "run_logon_script": true, and configure auto_connect_host. 

• Sophos Connect provisioning file

Thanks,

Thank you for your help. I did try to use prov file and but overall i cant connect to my gateway. I have made file as docs says but still no luck.

Hi Regex,

Thank you for providing a screenshot of the error. It looks like an issue accessing the User Portal. Could you please access the User Portal from the external network and see if you can access it? Also, check if you have a User Portal allowed on WAN.

Sophos Connect will import the SSL VPN configuration by connecting to the User portal on XG using the provisioning file's properties. 

Thanks,

Thank you for your reply. I have checked what you mentioned. Still no luck. Normally guest portal is disabled from WAN but for a while i turned it on for testing. User(me) can login without any problem.

I have also checked basic config where i just put only guest port and hostname the result is still the same ;( the sad thing is that sophos XG doesnt provide any usefull logs regarding that kind of issues ^^

Regarding documentation, my config file looks like this:

[
    { 
        "display_name": "SSL_VPN", 
        "gateway": "SomeFGDNname.ddns.net", 
        "user_portal_port": 4443, 
        "otp": false, 
        "auto_connect_host": "EmptyJustforTesting", 
        "can_save_credentials": true, 
        "check_remote_availability": false, 
        "run_logon_script": false 
    } 
]

EDIT:

OK all i can say is that it was my fault why isnt working. While i was creating a prof file in "user_portal_port": <port> 
I added "4443" instead as original documentation says 4443 -> without "". So now all is working Great 
Im very sorry for my bad and maybe this cloud help for someone else ;)
Thank you community that you were trying to help me.  I really appreciate it ;)