SSL VPN on Pool Notebooks - without certificate?!

Question

Hi, 
 
 we have 250 users having 10 pool Notebooks user get when traveling. 
 To connect to SG they use SSL VPN as Default. 
 Because user don't have admin Access on those Notebooks they are unable to copy/install their config files into the requested Directory. 
 So my question: What are the alternatives? SSL VPN without Client cert? Is this possible? 
 
 Thanks for helpfull hints 
 Gernot

BAlfson · Answer

Hallo Gernot, 
 I haven't tried it, but I read recently that there's a new OpenVPN client that doesn't require Administrator rights to install. Please let us know if that works for you. 
 Cheers - Bob

DouglasFoster · Answer

I would expect that you could do the following, but I have not tried it: An I/T person with privileges does the full install of the Sophos VPN client. Each installed user needs a .ovpn file and a folder in C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\config The administrator down-protects this folder, then removes his user structure unless he plans to be one of the regular device users. As each user borrows a laptop, he uses the User Portal to do a limited (certificate-only) installation. I would expect this does not require privileges as long as the target folder is down-protected. On device return or as desired, the I/T staff purges the user certificate structure out of the target folder before releasing the device to a different user.