Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 12 replies
  • Answers 2 answers
  • Subscribers 30 subscribers
  • Views 1205 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Feedback to Sophos Connect client

Oliver Regelmann

Some feedback from my technicians testing the Sophos Connect client. We are using it to connect to our office as well to multiple customer sites, so using it multiple times a day.

  • "password with spaces" issue still unfixed (9 months old)
  • Constant DNS problems (with the old VPN client these happened only sporadically)
  • Opening the connection is slow
  • No bulk import of the old ovpn files, just one by one
  • GUI doesn't scale, unreadable on 4K

Anyone having similar issues?



This thread was automatically locked due to age.

Top Replies

  • in reply to Oliver Regelmann +2 suggested

    You could potentially do this but it is actually quite likely dangerous to do this kind of support scenario. There are multiple reasons to actually consider to change this work approach as a Partner. 

    1. What happen, if you are infected as a Partner? By Connecting to the customer, you build a layer 2/3 connection to your customer, which grants you (in general) high privileges within the customer network. You can potentially cause a lot of harm by doing this connection. (see supply chain attack in a nutshell). 

    2. VPN as remote access will likely go out of date for "how to work in the future". Potentially ZeroTrust and ZTNA products will take over in the near future for several reasons. And if the customer goes full ZT, there is no "VPN to the customer" anymore. 

    3. If your client gets exposed as a partner, you could potentially leak a lot of information/credentials to all your customers, as those data is likely saved on your client. This makes this kind of approaches unsecure as well. 

    There are more points to it. I am not saying you should stop this. I am simply pointing out, there are other approaches for the future to consider working towards to rebuild security and partner business. 

    Doing VPN to all your customers could be a bad idea in the future anyway. No matter what product you are using. 

    Jump to answer