When will SSL VPN Users need to re-download configs?

Question

Hello, 
 we are currently testing 2FA with our XG v 19.0.1 and also some VPN changes. 
 Now every user has to download his personal config file from the user portal so he can connect. Is there a KB or something else where it is written WHICH option(s) are responsible for this? So I can avoid to make changes to that? 
 It was very frustrating to inform internal and external users that they have to download the file again. Its because of security, I know. But it would be great to know which option I can change and which one not. 
 Best Regards 
 Janek

emmosophos · Answer

Hello Janek, 
 Thank you for contacting the Sophos Community. 
 If you go to the Global Setting for SSL VPN 
 Whenever you change 
 a) Protocol, SSL server certificate, Override Hostname*, Port 
 b) Cryptographic Settings, any of them 
 * The Override hostname would depend if your Firewall Hostname and if you change your Public IP or if you use DDNS. 
 Regards,

When will SSL VPN Users need to re-download configs?

Top Replies