IKEv2 for remote access

This is postponed for a future release (No ETA currently). 

Sophos is also addressing some of those use cases of IKEv2 for RA with ZTNA. 

Nobody want to deploy another piece of software for something that is already built-in and fully managed by the OS....
And for something that all the other firewall maker seem to have implemented years ago....

Nobody want to deploy another piece of software for something that is already built-in and fully managed by the OS....
And for something that all the other firewall maker seem to have implemented years ago....

If you test ZTNA, you will not move back to VPN. At least that is my expectation. . 

Does it connect without user action at boot?
Authentification possible using computer certificates ?

It does not connect. It connects per application. It uses the Windows Authentication SSO, provided by Azure AD. 

Therefore the client simply logins to Windows. Clicks on his application and this works. Without any tunnel, without any certificate etc. 

This works over the IDP like Azure AD or Okta.