Disclaimer: This guide is based on Sophos Connect documentation available as of mid-2026.
Historically, network administrators had to manage separate client software for IPsec tunnels and SSL VPN connections. The SophosConnect_2.5.x_(IPsec_and_SSLVPN).msi installer resolves this friction by packing both technologies into a single application footprint.
Disclaimer: Always test new installers on a pilot group of machines before mass deployment. sophosconnect250gaipsecandsslvpnmsi work
For larger Windows networks managed via Active Directory, you can use Group Policy to automatically install the Sophos Connect client on every computer in an organizational unit (OU). This involves creating a startup script that runs the silent installation command.
For the MSI to "work" in an enterprise environment, you must use msiexec . The basic command to install silently is: Disclaimer: This guide is based on Sophos Connect
is the next-generation VPN client for Sophos Firewall (formerly XG Firewall). Version 2.5.0 GA (General Availability) replaces the legacy Sophos SSL VPN Client (v2.2.x) and provides a unified client for both IPsec IKEv2 and SSL VPN (OpenVPN-based) remote access.
| Parameter | Effect | |-----------|--------| | ALLUSERS=1 | Per‑machine install (requires admin rights) | | ALLUSERS=0 | Per‑user install (no admin required) | | ENABLE_LOGGING=1 | Enables debug logs under %ProgramData%\Sophos\Connect\Logs | | ADDLOCAL=ALL | Installs both IPsec and SSL VPN components | Disclaimer: Always test new installers on a pilot
: Features a "one-click" connect interface for end-users. 🚀 How to Make It Work Run the Installer : Double-click the .msi file. Follow the setup wizard to complete the installation. Import the Configuration : Open the Sophos Connect app. Click Import Connection .
Download the latest SophosConnect.msi from your firewall dashboard (System > Administration > Firmware & Updates > Download Tools) and test the silent install on a pilot group today.