PAGES
← all tools
◆ Secure Access (VPN / SASE / ZTNA)

Sophos Connect

Sophos Connect 2.1 - macOSReleased on 6 October, 2026 commercial

Sophos Connect is a VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. client that provides secure remote access to corporate networks for authorized users.

Summary

Sophos Connect is a commercial VPN client that provides secure remote access for users to connect to corporate networks via Sophos firewalls. It is for endpoint users needing secure-access and ztna capabilities, and it functions as a client connecting to corporate infrastructure. The tool has had two releases within the tracked window.

Sophos Connect is a VPN client that provides secure remote access to corporate networks for authorized users.

How Sophos Connect helps

Can I reach internal resources on the corporate network without a separate VPN application per site?

establishes an encrypted connection from the endpoint through the corporate Sophos firewall, presenting internal network access as if the device were on-site

Am I connecting through a trusted firewall before my traffic reaches the corporate network?

routes the session through a Sophos firewall that authenticates the endpoint before granting access to internal resources

Is my device's access limited to only what it needs, rather than the whole network?

supports zero-trust network access so connections are scoped to specific resources instead of exposing the full corporate network

Can remote or off-site staff get the same access they would have in the office?

provides a client-based tunnel that endpoint users run to reach corporate infrastructure from any remote location

all 3 features, with the evidence for each →

Languages

Not documented

Features

3 capabilities

Built from Sophos Connect's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Sophos Connect offers you

  • Single sign-on1
All capabilities 3 capabilities
Provisioning file import shipped Automatically imports remote access SSL VPN and IPsec VPN configurations from `.pro`, `.scx`, `.tgb`, and `.ovpn` files by double-clicking the file on the device. 5 releases · 3 other sources · first seen May 2024

release

  • Supports importing .pro, .scx, .tgb, and .ovpn connection and provisioning files by double-clicking the file on your device.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Sophos Connect 2.1 - macOSReleased on 6 October, 2026 · seen Oct 2026 · source · release history
  • Adds provisioning file support to automatically import remote access SSL VPN and IPsec VPN configurations to Sophos Connect for macOS. Sophos Connect 2.1 - macOSReleased on 6 October, 2026 · seen Oct 2026 · source · release history
  • Supports vpn_portal_port syntax in the provisioning file to specify the VPN portal port. Sophos Connect 2.3Released on May 15, 2024 · May 2024 · source · release history
  • Adds vpn_portal_port syntax to the provisioning file to specify the VPN portal port Sophos Connect 2.3Released on May 15, 2024 · May 2024 · source · release history
  • Allows importing a provisioning file with a renamed display_name field. Sophos Connect 2.3Released on May 15, 2024 · May 2024 · source · release history

example

  • Distribute a pre-built SSL VPN configuration to macOS endpoints without manual setup by double-clicking the provisioning file. Steps: 1. Place the provisioning file (e.g. `company-vpn.pro`) on the macOS endpoint. 2. Double-click the file in Finder. 3. Sophos Connect 2.1 - macOSReleased on 6 October, 2026 · seen Oct 2026 · source
  • Specify a custom port for the VPN portal connection in your provisioning file. # In your provisioning config file (e.g., .conf): vpn_portal_port 443 Sophos Connect 2.3Released on May 15, 2024 · May 2024 · source
  • Configure the VPN portal port explicitly in the provisioning file. # Add 'vpn_portal_port = 443' to your .ovpn or .conf provisioning file Sophos Connect 2.3Released on May 15, 2024 · May 2024 · source
Microsoft Entra ID SSO for VPN connections shipped Authenticates remote access SSL VPN and IPsec VPN connections via Microsoft Entra ID single sign-on, with support for an embedded browser, the system browser, or automatic browser selection. 4 releases · 3 other sources · first seen Jun 2025

Also counts toward: Single sign-on

release

  • Adds Microsoft Entra ID single sign-on (SSO) for remote access SSL VPN and IPsec VPN connections, with authentication in an embedded browser, the system browser, or a browser Sophos Connect automatically selects. Sophos Connect 2.1 - macOSReleased on 6 October, 2026 · seen Oct 2026 · source · release history
  • Establish remote access SSL VPN connections on macOS devices via the Sophos Connect client Sophos Connect 2.0 - macOSReleased on April 9, 2026 · Apr 2026 · source · release history
  • Enables single sign-on (SSO) via Microsoft Entra ID for the Sophos Connect Client on Windows when connecting to SFOS version 21.5 or later. Sophos Connect 2.4Released on June 2, 2025 · Jun 2025 · source · release history
  • Adds Single Sign-on (SSO) with Microsoft Entra ID for Sophos Connect Client on Windows devices when connecting to SFOS version 21.5 or later Sophos Connect 2.4Released on June 2, 2025 · Jun 2025 · source · release history

example

  • Enroll an Apple Silicon Mac into the corporate VPN using Microsoft Entra ID SSO so users authenticate without a separate VPN password. Steps: 1. Ensure the connection profile is configured for Microsoft Entra ID SSO. 2. Open Sophos Connect on an Apple Silicon Mac. 3. Select the SSL VPN or IPsec VPN connection and click Connect. 4. Sophos Connect 2.1 - macOSReleased on 6 October, 2026 · seen Oct 2026 · source
  • Enable SSO via Entra ID for a Windows client connecting to an SFOS gateway. N/A - Configured via the provisioning file or SFOS admin console Sophos Connect 2.4Released on June 2, 2025 · Jun 2025 · source
  • Configure Windows clients to use Entra ID for authentication instead of passwords when connecting via Sophos Connect. Steps: In the SFOS management console, configure Azure AD/Entra ID as an authentication source. Sophos Connect 2.4Released on June 2, 2025 · Jun 2025 · source
Apple Silicon (ARM) support shipped Runs natively on Apple Silicon Macs via ARM support. 2 releases · first seen Sep 2025

release

  • Adds native ARM support, enabling Sophos Connect to run on Apple Silicon Macs. Sophos Connect 2.1 - macOSReleased on 6 October, 2026 · seen Oct 2026 · source · release history
  • Adds support for installation on ARM-based Windows devices Sophos Connect 2.5Released on September 30, 2025 · Sep 2025 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Sophos Connect, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Sophos Connect puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

sophos.com, every change

Sophos's home page and 1 more page as they looked each month from September 2021 to October 2026: 12 renders, 3 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

Show

5 entries

  1. October 20261
  2. April 20261
  3. September 20251
  4. June 20251
  5. May 20241
    Show

    5 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →