Setting up Sophos SSL VPN on macOS

This guide explains how to install the Tunnelblick app on your macOS device to establish an SSL VPN connection to a Sophos XG firewall.

Info: This tutorial is also available in a version for iOS or Windows. If you want to set up a VPN to your UTM/SG firewall, see the following instructions: Install Sophos SSL VPN Client (Windows) - UTM

1. Download and install Tunnelblick

Download the free app Tunnelblick for your Mac and open the dmg file. Double-click on Tunnelblick.app to install the app. You will get a message when Tunnelblick has been successfully installed.

2. Download VPN configuration from XG Firewall

Next, open the XG Firewall User Portal in your web browser. Log in to the User Portal with your username and password. Go to the menu item SSL VPN in the navigation and download your VPN configurations as a file via the link Download Configuration for Other OSs. You should then find a configuration file with the extension “ovpn” in your download folder.

3. Open Tunnelblick

Then open the Tunnelblick app, which is now in your program folder. The Tunnelblick icon should now appear in the menu bar. When you launch Tunnelblick for the first time, you’ll first be greeted with a welcome message informing you that Tunnelblick hasn’t found any VPN configurations on your Mac at the moment. Click on the button I have configuration files. Then another window appears describing how to add a configuration to Tunnelblick. Confirm with Ok to continue.

4. Add configuration to Tunnelblick

Now drag and drop the “ovpn file” from your download folder onto the Tunnelblick icon. You will then be asked if you want to install the configuration for all users. You can finally decide for yourself, but we strongly advise you to choose the option Only for this user. To install the configuration file, you may have to enter and confirm your password for your macOS user account again.

5. Log in with user data

Click on the Tunnelblick icon in the menu bar and select the VPN profile you just created from the list. To establish a VPN connection, you only need your VPN user name and password. Confirm with Ok and the VPN connection will be established in a few seconds.