Feedback to Sophos Connect client

Question

Some feedback from my technicians testing the Sophos Connect client. We are using it to connect to our office as well to multiple customer sites, so using it multiple times a day. 
 
 "password with spaces" issue still unfixed (9 months old) 
 Constant DNS problems (with the old VPN client these happened only sporadically) 
 Opening the connection is slow 
 No bulk import of the old ovpn files, just one by one 
 GUI doesn't scale, unreadable on 4K 
 
 Anyone having similar issues?

LHerzog · Accepted Answer

Sophos, you should release a fixed version of this software asap. 
 Oliver Regelmann said: GUI doesn't scale, unreadable on 4K 
 You can work around that issue with GPO. https://community.sophos.com/sophos-xg-firewall/f/discussions/126861/unhappy-with-lack-of-high-dpi-support-in-sophos-connect 
 Be aware of other characters in passwords also not working, not only space. Just search the forums.

LuCar Toni · Answer

You could potentially do this but it is actually quite likely dangerous to do this kind of support scenario. There are multiple reasons to actually consider to change this work approach as a Partner. 
 1. What happen, if you are infected as a Partner? By Connecting to the customer, you build a layer 2/3 connection to your customer, which grants you (in general) high privileges within the customer network. You can potentially cause a lot of harm by doing this connection. (see supply chain attack in a nutshell). 
 2. VPN as remote access will likely go out of date for "how to work in the future". Potentially ZeroTrust and ZTNA products will take over in the near future for several reasons. And if the customer goes full ZT, there is no "VPN to the customer" anymore. 
 3. If your client gets exposed as a partner, you could potentially leak a lot of information/credentials to all your customers, as those data is likely saved on your client. This makes this kind of approaches unsecure as well. 
 There are more points to it. I am not saying you should stop this. I am simply pointing out, there are other approaches for the future to consider working towards to rebuild security and partner business. 
 Doing VPN to all your customers could be a bad idea in the future anyway. No matter what product you are using.

Vivek Jagad · Answer

Hey Oliver Regelmann , There is already an investigation going on NCL-1319,NCL-1507 where the issue will be fixed in Sophos connect 2.2 OR 2.3 - "password with spaces"

Feedback to Sophos Connect client

Top Replies

Submitted a Tech Support Case lately from the Support Portal?