uninstall VPN Client silent and install the new Sophos connect

Hi Nick,

You may check the following Post for reference with Silent Uninstallation

community.sophos.com/.../sophos-ssl-vpn-client-silent-uninstall

Hi,

If I install the new Sophos Connect (MSI File), after install, I have to import my .openvpn File, how can do that with migration script?

You may refer the following community link - https://community.sophos.com/sophos-xg-firewall/f/discussions/133788/migrating-from-sophos-ssl-vpn-client-to-sophos-connect-v2/493084#493084

Hi Vivek,

I want to deploy for 100 Users Sophos Connect, that I can do with GPO or SCCM Server. But the openvpn file is specify for different users. Is there any way to deploy the openvpn File for specifiy users?

Actually it is possible.

You migrate to Sophos Connect. Then you deploy the .pro file (Provisioning file). This file is a one time file for all users: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNSConProvisioningFile/index.html

This file essentially downloads the ovpn file from each user per login. So to speak: You replace with the migration script the old sslvpn client and then place your .pro File in the \import\ folder of your sophos connect. This is possible via GPO or SCCM. 

Then the sophos connect will pickup the rest. 

Actually it is possible.

You migrate to Sophos Connect. Then you deploy the .pro file (Provisioning file). This file is a one time file for all users: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNSConProvisioningFile/index.html

This file essentially downloads the ovpn file from each user per login. So to speak: You replace with the migration script the old sslvpn client and then place your .pro File in the \import\ folder of your sophos connect. This is possible via GPO or SCCM. 

Then the sophos connect will pickup the rest. 

Hi Toni,

We have at the time the UTM 9. I am not sure I can do that with Provisioning file.

Regards

UTM does not support this approach. But Sophos Connect will pickup the left overs of the old client. So if the UTM is working right now, you uninstall the old client and the install sophos connect, the Ovpn will still exist. 

I know that, but as I mention, I want to deploy the ovpn File for each user with SCCM or GPO. Is that possible?

You can download the config in UTM. So yes you can do this. 

How please? We have 100 Users. I am not sure if I can deploy it for 100 Users because the opvn File for each user are different

Again: You need SFOS for doing the single file deployment (.pro).

You can download each single file per user from UTM (ovpn) but you need to deploy it per user. If your tool cannot do it per user, you cannot deploy it.