First Buy or Renewal

Were we able to help you with this tutorial? Then consider us for the next Renewal. 😎
We sell licenses for all Sophos Firewalls worldwide!

To the Products

Setting up Sophos SSL VPN on macOS

This guide explains how to install the Tunnelblick app on your macOS device to establish an SSL VPN connection to a Sophos XG firewall.

Info: This tutorial is also available in a version for iOS or Windows. If you want to set up a VPN to your UTM/SG firewall, see the following instructions: Install Sophos SSL VPN Client (Windows) - UTM

1. Download and install Tunnelblick

Download the free app Tunnelblick for your Mac and open the dmg file. Double-click on Tunnelblick.app to install the app. You will get a message when Tunnelblick has been successfully installed.

2. Download VPN configuration from XG Firewall

Next, open the XG Firewall User Portal in your web browser. Log in to the User Portal with your username and password. Go to the menu item SSL VPN in the navigation and download your VPN configurations as a file via the link Download Configuration for Other OSs. You should then find a configuration file with the extension “ovpn” in your download folder.

3. Open Tunnelblick

Then open the Tunnelblick app, which is now in your program folder. The Tunnelblick icon should now appear in the menu bar. When you launch Tunnelblick for the first time, you’ll first be greeted with a welcome message informing you that Tunnelblick hasn’t found any VPN configurations on your Mac at the moment. Click on the button I have configuration files. Then another window appears describing how to add a configuration to Tunnelblick. Confirm with Ok to continue.

4. Add configuration to Tunnelblick

Now drag and drop the “ovpn file” from your download folder onto the Tunnelblick icon. You will then be asked if you want to install the configuration for all users. You can finally decide for yourself, but we strongly advise you to choose the option Only for this user. To install the configuration file, you may have to enter and confirm your password for your macOS user account again.

Important: Once the configuration file has been installed, open the Tunnelblick settings. In order to establish the VPN connection, the version 2.3.18 must be selected for the OpenVPN Version.

SSL VPN settings for Tunnelblick

5. Log in with user data

Click on the Tunnelblick icon in the menu bar and select the VPN profile you just created from the list. To establish a VPN connection, you only need your VPN user name and password. Confirm with Ok and the VPN connection will be established in a few seconds.