Setting up Sophos SSL VPN on macOS
This guide explains how to install the Tunnelblick app on your macOS device to establish an SSL VPN connection to a Sophos XG firewall.
Info: This tutorial is also available in a version for iOS or Windows. If you want to set up a VPN to your UTM/SG firewall, see the following instructions: Install Sophos SSL VPN Client (Windows) - UTM
1. Download and install Tunnelblick
Download the free app Tunnelblick for your Mac and open the dmg file. Double-click on
Tunnelblick.app to install the app. You will get a message when Tunnelblick has been successfully installed.
2. Download VPN configuration from XG Firewall
Next, open the XG Firewall User Portal in your web browser. Log in to the User Portal with your username and password. Go to the menu item
SSL VPN in the navigation and download your VPN configurations as a file via the link
Download Configuration for Other OSs. You should then find a configuration file with the extension “ovpn” in your download folder.
3. Open Tunnelblick
Then open the Tunnelblick app, which is now in your program folder. The Tunnelblick icon should now appear in the menu bar. When you launch Tunnelblick for the first time, you’ll first be greeted with a welcome message informing you that Tunnelblick hasn’t found any VPN configurations on your Mac at the moment. Click on the button
I have configuration files. Then another window appears describing how to add a configuration to Tunnelblick. Confirm with
Ok to continue.
4. Add configuration to Tunnelblick
Now drag and drop the “ovpn file” from your download folder onto the Tunnelblick icon. You will then be asked if you want to install the configuration for all users. You can finally decide for yourself, but we strongly advise you to choose the option
Only for this user. To install the configuration file, you may have to enter and confirm your password for your macOS user account again.
Important: Once the configuration file has been installed, open the Tunnelblick settings. In order to establish the VPN connection, the version 2.3.18 must be selected for the
5. Log in with user data
Click on the Tunnelblick icon in the menu bar and select the VPN profile you just created from the list. To establish a VPN connection, you only need your VPN user name and password. Confirm with
Ok and the VPN connection will be established in a few seconds.