Remote access SSL VPN with certificate only based authentication

Hi cicro,

Thank you for reaching out to Sophos Community.

Upon checking, this is under SFSW-I-1966 Feature request and is waiting for PM review, you may reach out to Sophos Support to have your account link with the said Feature Request

This is a huge gap for Sophos at the moment, and one of the best ways to prevent account lock-outs on VPN connections; without certificate based authentication lots of accounts get locked out due to brute force password attacks against known user accounts.  Even with MFA account lockout is still possible.

Many other vendors support this; it's about time Sophos adds it.  I'd love to see it as a secondary method in addition to MFA push so that we know it's the user and not someone controlling their machine with a RAT.

This is a huge gap for Sophos at the moment, and one of the best ways to prevent account lock-outs on VPN connections; without certificate based authentication lots of accounts get locked out due to brute force password attacks against known user accounts.  Even with MFA account lockout is still possible.

Many other vendors support this; it's about time Sophos adds it.  I'd love to see it as a secondary method in addition to MFA push so that we know it's the user and not someone controlling their machine with a RAT.