SSL Client won't install on windows 10

Question

I just install a new (my first) Sophos XG. 
 Installed on Azure using market place image. 
 After setup I configured SSL-VPN client and clientless. 
 I logged into the site and downloaded the client and configuration for windows. 
 However when I try to install I receive a "this app cant run on your pc" message 
 
 Any ideas plz?

privacychair online · Answer

You can also try to use the Windows 10 built-in client instead of downloading one. 
 Here is an example VPN setup using the Windows 10 built-in client: 
 https://www.magnumvpn.com/setup-vpn-windows-10-l2tp-ipsec.html 
 You might have to enable IPSec rather than OpenVPN to get it to work.

Alex Vincer · Answer

I figured out how to deploy the Sophos VPN Client used with XG firewalls to computers ahead of time, while still allowing users to log into the Client Portal, download their configuration, and paste it into the config folder without requiring membership in the local Administrators group. 
 
 Extract the Publisher Certificate from the client executable with 7-Zip:
 
 Log into the Sophos Client Portal and click &ldquo;SSL VPN > Download Client and Configuration for Windows&rdquo; 
 In the File Explorer location that you downloaded the file, right click the executable and extract all contents to a folder 
 Navigate into that folder, then open the &ldquo;driver&rdquo; folder and double click the &ldquo;tap0901.cat&rdquo; file 
 Click &ldquo;View Signature&rdquo;, then &ldquo;View Certificate&rdquo;, then the &ldquo;Details&rdquo; tab, then &ldquo;Copy to File&hellip;&rdquo;, Next, Next, click &ldquo;Browse&hellip;&rdquo; to choose a filename and location to save the certificate file. 
 Close all windows.

Add that certificate to the Trusted Publishers on all of the relevant domain-joined PCs using Group Policy
 
 In your policy, drill down to &ldquo;Computer Configuration&rdquo; > Policies > Windows Settings > Security Settings > Public Key Policies > Trusted Publishers&rdquo; 
 Right click that &ldquo;Trusted Publishers&rdquo; folder and click &ldquo;Import&hellip;&rdquo;, click Next, browse to the certificate that you extracted in step 1, click Next and Finish. 
 Wait 24 hours for all of the computers in the scope of this policy to receive the certificate when Group Policy checks in on their PC

Use PDQ Deploy to perform the following two steps:
 
 Install the client and configuration that you downloaded in step 1 with the /S parameter 
 Run an icacls command to change the permissions of the config folder to allow members of the local Users group to Modify: icacls &ldquo;C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config&rdquo; /grant Users:(OI)(CI)M /T

Then, when users are ready, they log into the Sophos Client Portal with their AD credentials, click &ldquo;SSL VPN > Download Configuration for Other OSs&rdquo;, copy the file, navigate to the config folder in step 3.2, delete the old config file, paste in the one they just downloaded, then empty the trash. 
 Connect to the VPN with their AD credentials. It works!