Hello Bero, 

Thank you for reaching out to the Sophos Community.

Do you know if the profile that will be deployed onto the mobile device is an MDM profile that will apply to the device as a whole, or is the profile specific to the OpenVPN application only?

If you have a test device, I recommend trying this out to see how it behaves. If the OpenVPN profile behaves similar to that of an MDM profile, there’s a chance that it may over-write the Sophos Mobile Control configurations. 

I would like to deploy a profile for the OpenVPN client app on the android phone and I would like to know how is the best way to do this so could you please guide me? I have a test version of Sophos central, we are still testing the system to know if it would be suitable for our needs.

Many thanks for the reply.

Still no answer about how to deploy an OVPN profile on IOS/Android Smartphones using Sophos MDM.

Some information I was able to find on how to deploy an OpenVPN profile can be found here.

App developers also have the option to enable a Managed Configuration to be applied to the app upon deployment. It looks like this option is not enabled by the developer of OpenVPN. 

The current options we have show it is possible add VPN settings, but the following article indicates that "Managed Configuration" will need to be possible for this to work. 
- VPN configuration (Android Enterprise device policy)

Could you provide me with the format in which the OpenVPN profile is stored? Is this a certificate that gets installed on the mobile device, or is it something different? Have you had a chance to test the way this normally works outside of the MDM? 

Thank you for the reply!

The OVPN profiles will be created for each device using Sophos Firewall. The app on the IOS/Android devices is

OpenVPN Connec.

So I am not using the OpenVPN portal

https://openvpn.net/cloud-docs/user-downloading-app-getting-profile-and-connecting/

Also I was hoping to be able to deploy a separate .OVPN Profile over Sophos Mobile for each device. 

In order to configure the Open VPN application directly, the developer will need to enable "Managed Configuration" for the app. 

If you are looking for another way to distribute the files to the devices, it is also possible to do so using the "Sophos Secure Workspace" application, however, it may be easier to email the files to your endusers.