First Buy or Renewal

Were we able to help you with this tutorial? Then consider us for the next Renewal. 😎
We sell licenses for all Sophos Firewalls worldwide!

To the Products

How to install the Sophos Connect Client on windows

In this tutorial, we will show you how to download the Sophos Connect Client from your Sophos XG Firewall and install and configure it on a Windows computer.

Sophos Connect Client - Series

This article is part of a series that will give you all the knowledge you need to get started with the Sophos Connect Client.


  • Firmware SFOS 17.5 or higher
  • Windows client operating system: Windows 7 SP2 or higher

1. Download Sophos Connect Client

To start the installation, you must first download the Sophos Connect Client for Windows. This is currently only possible as an administrator through the XG firewall. Follow the steps below to do this:

  1. Navigate to the VPN > Sophos Connect Client menu item on the XG firewall.
  2. In the section Client data > Sophos Connect Client, click Download.

A zip file named sophosconnect_installer.zip will then be saved on your computer. When you extract this zip file, you will find three files in it:

  • scadmin.msi - Sophos Connect Admin Tool
  • Sophos Connect.pkg - Sophos Connect Client for macOS
  • SophosConnect.msi - Sophos Connect Client for Windows

For these instructions we need the SophosConnect.msi package.

2. Installing the Sophos Connect Client

Start the installation of the Sophos Connect Client by double-clicking the SophosConnect.msi file. Once the installation is complete, you can exit the installation wizard by clicking Close.

3. Download connection file

When you start the Sophos Connect Client for the first time, a connection file is required to import. This file can currently only be downloaded by an administrator through the XG firewall. To do this, follow these steps:

  1. Navigate to the VPN > Sophos Connect Client menu item on the XG firewall.
  2. Click the Export connection button at the bottom of the browser to download the IPsec connection file. 3 You should now find a *.tgb file in your download folder.

Note: If you wish, you can make adjustments to the *.tgb file using the Sophos Connect Admin Tool before proceeding to the next step. The following instructions can help:
Sophos Connect Admin Tool: How to modify VPN config file

4. Setting up the Sophos Connect Client

The Sophos Connect Client can be set up in just a few steps:

  1. Open the Sophos Connect Client and click Import Connection.
  2. Select the connection file with the extension *.tgb or *.scx from your hard disk. The connection will then be listed under Connections.
  3. Now click on Connect to establish the IPsec connection.
  4. Next, log in with your VPN user.

If you have entered the correct user data, a VPN connection should now be established successfully. Don’t forget to click Disconnect again in the Sophos Connect Client when you no longer need the VPN connection.