Sophos SSL VPN Client EOL: What does this mean for UTM?

Hi,

I think the SSL VPN will cease on the XG and XGS but not the UTM. As you rightly pointed out, Sophos Connect is not available to download and unless they rush out a patch to the UTM to allow that then how can they expect to pull the plug from the UTM? It does state that it will continue to work so you'll be ok for the moment but need to plan to migrate them away from the SSL VPN. Whether this means OpenVPN software and you download the .ovpn config file from the user portal instead could be the case.

I'm quite surprised at the sudden announcement myself but UTM is slowly being wound down, its old technology and although I love the layout/configuration, the XG/XGS are the way Sophos are going and we can't stop that.

My advice is plan now to replace UTM with the XGS, the sooner the better to avoid sudden announcements like this causing headaches.

We will still use UTM for several more months before moving to XG. The email that i got said:

"Sophos Connect v2 is our new and greatly enhanced VPN client that works with both Sophos (XG) Firewall and Sophos (SG) UTM. "

So it says that it works with the UTM. Can't figure out how to make it work at the moment. 

See: https://support.sophos.com/support/s/article/KB-000043484?language=en_US

You can use the Sophos Connect Client like the SSLVPN Client with UTM as well. It will import the OVPN files of the old Client and basically work like the current client.

It will not have any "new features" like auto provisioning or adjustments on the Config etc. 

The issue is the UTM you cant download the Sophos Connect Client to start with. I wonder if Sophos will make it downloadable via their website.

See KB linked in the KB: https://support.sophos.com/support/s/article/KB-000043396?language=en_US

I already tested it (ssl) with Windows and Mac using the current version of Sophos connect, Unfortunately I do get an an error importing the config on Mac (unknown file format) while it works on Windows (...) Is there an update coming up soon for Mac ?

SSLVPN  is not supported on MacOS. As far as i remember, SSLVPN on UTM did not support MacOS as well. 

Ok. but it's planed for the pending/upcoming version for Mac, isn't it ?

Ok. but it's planed for the pending/upcoming version for Mac, isn't it ?

MacOS is planned for the backlog. If you want to look into MacOS, it would be a good shot to also consider looking into ZTNA. 

Many analyst and tech people assume VPN to be replaced by ZTNA in the near future, especially in times of home office. It resolves plenty of pain points of VPN from years.