We have been successfully using the SSL-VPN client for authenticating to our XG firewall. We are now trying to implement DUO MFA for this, and are looking into the Sophos Connect 2.0 with SSL client, as that appears to be more suited than SSL-VPN. After looking through the documentation I'm unable to figure out the exact sequence of how to configure a workstation for Sophos Connect and DUO.
1. If I download the Sophos Connect client from our user portal, and import the existing ovpn configuration. Sophos Connect will connect fine
2. There is no provision in the XG setup for adding Sophos Connect as a separate option? Is this because we already have SSL implemented?
3. If we use a .Pro file...what is the name of this file supposed to be and where is it supposed to reside for on the user's workstation?
4. I'm assuming we need the .Pro file as there are parameters there which specify use of MFA
4. Do we need both a .pro file and an .ovpn file on the user's workstation? (where .ovpn appears to hold the certificates.)
Any help would be greatly appreciated, and I will be happy to write up a final description of the provisioning process.
This thread was automatically locked due to age.
