Disclaimer: This information is posted as-is and the content should be referenced at your own risk
This is a very early beta of a script that does the following:
- Takes a backup of the old ovpn config from SG UTM SSLVPN
- Removes old SG UTM client
- Installs Sophos Connect
- Imports the old config into Sophos Connect so user can still connect to UTM
- Installs a provisioning file for the coming Sophos Firewall, so migration should be easier :-)
Have testet it all, it works so far good, but do not implement in production before thoroughly tested :-)
IF NOT EXIST "c:\Program Files (x86)\Sophos\Sophos SSL VPN Client\uninstall.exe" goto :eof
REM Remove the old client
REM Kill running programs, preventing uninstall
taskkill /im openvpn* /F
REM Backup the OVPN config file
rem rmdir "c:\!vpn" /s /q
copy "c:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config\*.ovpn" c:\!vpn\
REM Use uninstaller to remove the client
cd\Program Files (x86)\Sophos\Sophos SSL VPN Client
REM Do folder cleanup - if not, Sophos Connect refuse to install
rmdir "c:\Program Files (x86)\Sophos\Sophos SSL VPN Client" /s /q
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%Sophos_Connect%" GOTO INSTALL
exit /b 0
IF NOT EXIST "%ProgramFiles%\%Sophos_Connect%" GOTO INSTALL
exit /b 0
msiexec.exe /i "\\server\share\SophosConnect.msi" /QN
REM Deploying SSLVPN provisioning file - user must connect once with the client to fetch their profile when SF is in place.
REM Userportal on SF must be accessible and with a valid certificate!
copy /Y "\\server\share\xgsslvpn.pro" "C:\Program Files (x86)\Sophos\Connect\Import\"
REM Deploying old SSLVPN for UTM
copy /Y "c:\!vpn\*.ovpn" "C:\Program Files (x86)\Sophos\Connect\Import\"
REM Start Gui - tray icon.
start "" "C:\Program Files (x86)\Sophos\Connect\GUI\scgui.exe"
END && EXIT
Attached are the bat file and the provisioning file :-)
Let me hear your thoughts :-)
I tried just importing individual ovpn files in Sophos Connect and that has resulted in "VPN service is not running" messages.
I'll run your script and see if I have better luck when the files are imported that way.
Cheers - Bob
I just saw, that this is also discussed in another topic: Sophos Connect on Windows Server - Discussions - Sophos Firewall - Sophos Community