sophos xg125 vpn client with smartcard authentication

Hi Udo,

Thank you for reaching out to Sophos Community.

This would be a feature request. I recommend you contact Sophos Support/AM to have this added to your account.

Hi Udo,

Thank you for reaching out to Sophos Community.

This would be a feature request. I recommend you contact Sophos Support/AM to have this added to your account.

Hi Erick,

If I understand you correctly, there is currently no solution for this and Sophos would first have to extend the functionality of the XG125 (or the Connect client).

Kind regards

Udo

Hi Udo,

Sophos firewalls offer several authentication methods, such as Active Directory, MFA, and local. However, smart authentication isn’t yet applicable.

You may refer to the following KB for reference

•  Sophos Firewall: Authentication Methods 
• VPN Authentication

Hi Erick,

thanks for the quick response.

You've given me an idea:
I create the VPN users as local users with Sophos MFA on the XG so that they can dial in with OTP. However, they log on to the network using Yubikey and Active Directory.

Kind regards

Udo