VPN upgrade from SG to XG?

Hi MarkThornton 

There is no direct mechanism that can allow you to import certificate from SG to XG.

To import the certificate in XG- https://community.sophos.com/kb/en-us/123036

I wasn't able to figure out how to export both the certificate and the private key from the SG. The certificate is easy enough to download, but the requirement for the private key to upload is the challenge. I guess I will go through the pain of generating and distributing new certificates all around.

XG cannot use Imported Certificate for SSLVPN.

So do not take this way, because it will not work anyway. 

XG will always create a new SSLVPN Configuration (+Certificate) for each user.

Maybe the better approach is to migrate to Sophos Connect (IPsec).

One configuration for all users without the need of SSLVPN.

https://community.sophos.com/kb/en-us/133109

Use the existing SG, while all clients are connected, push out the Sophos Connect configuration via GPO and teach the people to use another client.

https://community.sophos.com/kb/en-us/133555

Then slowly migrate the SSLVPN User one by one, if needed.