Sophos
VPN Guide
Need assistance to enable MFA? Look at this page: Sophos VPN - MFA Guide using Sophos Intercept X
1. Visit the VPN portal of your company by going to https://0.0.0.0:8443 or htttps://0.0.0.0:7443
(replace 0.0.0.0 with the IP address given, like https://49.21.255.29:8443.)
2. If prompted, click Advanced, then "Continue to x.x.x.x (unsafe)"
3. You should now see a screen similar to the image below. If your account has been allowed in the firewall, you can sign in here. If you can get into the VPN portal, skip to Step 6.
Username: [Username for the PC] / [Email]
Password: [Password for the PC]
Note: if you have MFA setup, you will need to enter those digits after the password from Sophos Intercept X App; Password+MFA Code, no spaces e.g.: "ClearSky654731"
If you have tried to log-in, but cannot; it may be because you have not been added to the allowed users in the firewall yet. If that is the case, please contact ABit.
4. Sometimes, you will need to generate your profile before the VPN will allow you to log-in. If that is the case, please click "Take me to User portal".
5. After a successful log-in to the User portal, your firewall profile has been generated. You will need to contact ABit once you have done this, so they can allow that profile to access the VPN.
6. Now that you are in the VPN portal, please download the following. You can skip the Sophos Connect client if you already have it installed.
7. Go to browser downloads upper corner folder double and double click config file or got to download folder windows and double click the Config file
8. Open sophos connect.
9. Sophos Connect should now be open. If you do not see it in the taskbar, it is most probably hiding in the hidden menu. Try seeing if you find it there.
10. You will now need to click "Import Connection", and then navigate to the file you downloaded earlier. You can also find this in the Top-right dotted menu, and then "Import connection"
11.1. Choose the file.
12. You should now see that same IP address. Hit "Connect", and enter the same details that you needed to enter for the VPN portal. Be mindful of the MFA.
12.1. if you have MFA enabled with Sophos Intercept X, load your 6-digit code by clicking the 3 lines, going to Authenticator, and you should see your 6-digit code there.
 |
 |
13. Sophos Connect should now be connected into your company, and you should be able to access company resources while out of the office.
You should also see a green tick on the taskbar icon itself.
ABit SSLVPN Auto Provisioning Guide
- Ensure User Firewall account is SSLVPN and MFA Enabled.
- Register MFA for User, no need to login further.
- On User device download and Install Sophos Connect:
https://downloads.abitsystems.com.au/support/index.php?p=sslvpnprovision&dl=SophosConnect_2_1_20.msi
- Once Sophos Connect is installed, download:
- Both Downloads are in “ABit Support Downloads > sslvpnprovision”.
- Keep the downloaded file, “ABit_Auto_Provision_SSLVPN.exe”
- Run “ABit_Auto_Provision_SSLVPN.exe” as Administrator:
- Ignore errors, select required Organisation connection and click OK.
- Follow instructions in popup and attempt 1 connection to SSLVPN profile.
- **DO NOT IMMEDIATELY CLICK OK**
- Initial connection will fail, this is a limitation of Sophos Connect.
- Return to “ABit_Auto_Provision_SSLVPN.exe” and Click OK.
- SSLVPN Connection name will be corrected and all subsequent connection attempts will work.
Sophos VPN - MFA Guide using Sophos Intercept X
All images are from Android / Google Pixel, but the general process is the same on Apple phones.
1. Install the Sophos Intercept X for Mobile application.
- Google Play Store: Sophos Intercept X for Mobile
- App Store: Sophos Intercept X for Mobile
|
|
|
2. Open the application up, and Accept and Continue for the Terms of Use.
3. Allow the application to send you notifications.
 |
|
4. If prompted, allow access to all files. This is for the anti-virus functionality. (If you want, you can turn it off later)
 |
 |
|
5. If prompted, allow usage access. This is for the anti-virus functionality.
|
|
|
|
6. If prompted, allow to display over other passwords. This is for the password manager functionality.
|
|
|
|
7. You should now see the home screen of Sophos Intercept X. Open the Hamburger menu at the top-left, you should see "Authenticator".
8. Go into the Authenticator, there should be nothing there, except a (+) bubble in the bottom right of the screen. Tap that, and then "Scan QR code". The application may ask you to use the camera, allow it access. This is just so you can scan the QR code.
9. You should now see a 6-digit MFA code that refreshes every 30 seconds or so with a new code. All finished!
How do I turn off the anti-virus?
This is a bad idea, and it is generally recommended to have some form of malware protection. But if you already use a malware protection on your device, or are technically adept enough, go into the Settings in Intercept X, there are a lot of checkbox toggles to disable all functionality.