Help us enhance your Sophos Community experience. Share your thoughts in our Sophos Community survey.

Thread Info
  • Locked Locked
  • Replies 13 replies
  • Subscribers 8 subscribers
  • Views 5281 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SSL VPN Client EOL: What does this mean for UTM?

Dominik Wagner1

Hello everybody,

just a few minutes ago, I've received an End-of-Life notification from Sophos regarding the EOL of the Sophos SSL VPN Client on January, 31st 2022.

According to the email, one can still use the SSL VPN after the fact, but using an EOL security product does not strike me as a good idea.

According to the email, we should replace the SSL VPN client with the "new and improved" Sophos Connect v2 client.

I'm unclear however, how to best go about this.

SOP right now for our users:

1. Open up the UTM user portal.

2. Download and install the SSL VPN client.

3. Proft.

How can I go about providing my users with the new VPN client? Is this client still OpenVPN based? Do I need to change anything about the VPN configuration of our UTM?

I'm honestly quite surprised to learn that SSL VPN is EOL, it's the first I've heard about this and January 22nd isn't really far off.

Regards,

Dominik



This thread was automatically locked due to age.
Parents

  • Hi,

    I think the SSL VPN will cease on the XG and XGS but not the UTM. As you rightly pointed out, Sophos Connect is not available to download and unless they rush out a patch to the UTM to allow that then how can they expect to pull the plug from the UTM? It does state that it will continue to work so you'll be ok for the moment but need to plan to migrate them away from the SSL VPN. Whether this means OpenVPN software and you download the .ovpn config file from the user portal instead could be the case.

    I'm quite surprised at the sudden announcement myself but UTM is slowly being wound down, its old technology and although I love the layout/configuration, the XG/XGS are the way Sophos are going and we can't stop that.

    My advice is plan now to replace UTM with the XGS, the sooner the better to avoid sudden announcements like this causing headaches.

  • in reply to Sophos User5308

    We will still use UTM for several more months before moving to XG. The email that i got said:

    "Sophos Connect v2 is our new and greatly enhanced VPN client that works with both Sophos (XG) Firewall and Sophos (SG) UTM. "

    So it says that it works with the UTM. Can't figure out how to make it work at the moment. 

  • in reply to WRS

    See: https://support.sophos.com/support/s/article/KB-000043484?language=en_US

    You can use the Sophos Connect Client like the SSLVPN Client with UTM as well. It will import the OVPN files of the old Client and basically work like the current client.

    It will not have any "new features" like auto provisioning or adjustments on the Config etc. 

    __________________________________________________________________________________________________________________

Reply Children
Unfiltered HTML