More details about this process would be illuminating.
Does the provisioning file force the client to always check for an updated configuration?
Or must the end-user manually re-import the provisioning file (or via GPO etc) for the automatic updates to configuration changes?
Link:
https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/RemoteAccessVPN/IPsecSSL/SophosConnect/RAVPNSConProvisioningFile/index.html#benefits
