Configure VPN provisioning file

The Sophos Connect provisioning file allows you to provision remote access IPsec and SSL VPN configurations.

Based on the provisioning file settings, the Sophos Connect client connects to the user portal using the user's credentials and automatically imports the following configuration files:

• IPsec remote access settings: .scx file for all users.
• SSL VPN remote access policies: .ovpn file for users specified in the policies.

It also fetches the updates you make to remote access IPsec and SSL VPN settings and policies.

Configure and import the provisioning file

To create and import the provisioning file, do as follows:

1. Open a new file in a text editor, such as Notepad.

2. Copy and edit the settings to meet your network requirements using the syntax on Provisioning file settings.

   Note

   You must specify the hostname or IP address for the gateway. The other fields are optional.

   Example settings

   [
       {
           "gateway": "203.0.113.1",
           "user_portal_port": 443
       }
   ]
   

3. Save the file with a .pro extension.

4. To install it on users' endpoints, do one of the following:

   • Email the provisioning file to users.

     Users must click Import connection in the Sophos Connect client and select the file. Alternatively, they can double-click the .pro file to import it. See Remote access IPsec and SSL VPN.

   • Use an Active Directory Group Policy Object (GPO) to automatically import it to the Sophos Connect client on users' endpoints after start-up. See Import VPN provisioning file through GPO.

More resources

• Remove untrusted certificate error