Sophosconnect 2.5.0 Ga Ipsec And Sslvpn.msi [VERIFIED]
| Log file | Path | Use case |
|----------|------|----------|
| Service log | %ProgramData%\Sophos\Sophos Connect\Logs\service.log | IPsec service & IKE events |
| SSL VPN log | %ProgramData%\Sophos\Sophos Connect\Logs\openvpn.log | OpenVPN engine (SSL mode) |
| GUI log | %AppData%\Sophos\Sophos Connect\Logs\gui.log | UI actions, import errors |
Enable debug logging (temporary):
sc stop "Sophos Connect Service"
sc start "Sophos Connect Service" --log-level=debug
The IPSec component has been hardened to address disconnection issues common in earlier builds. The IKEv2 (Internet Key Exchange version 2) implementation is now more resilient to network roaming (switching from Wi-Fi to Ethernet). sophosconnect 2.5.0 ga ipsec and sslvpn.msi
After deployment, verify the installation path: C:\Program Files (x86)\Sophos\Sophos Connect\ . Look for SophosConnect.exe. Version 2.5.0 should have a digital signature dated around April 2023.
If you have the old "Sophos SSL VPN Client" (version 1.x or the blue icon), you cannot run both simultaneously. You must migrate. | Log file | Path | Use case
Sophos Connect 2.5.0 GA (sophosconnect_2.5.0_ga_ipsec_and_sslvpn.msi) is a general-availability release of the unified VPN client for Sophos Firewall (formerly XG) and Sophos UTM. This version provides native IPsec IKEv2 and SSL VPN termination in a single lightweight MSI package, targeting enterprise environments requiring centralized configuration delivery, single sign-on (SSO), and post-quantum readiness.
This document outlines the technical specifications, deployment methods, security features, and operational considerations for the 2.5.0 GA release. The IPSec component has been hardened to address
Under the hood, the SSL VPN component uses an updated OpenVPN 3 library. Version 2.5.0 GA specifically patched the CVE-2023-2840 vulnerability (Windows Installer privilege escalation). If you are still using an older client, this security fix alone justifies the upgrade.
You cannot download this file from a public webpage. Sophos firewall software is proprietary. You must download SophosConnect_2.5.0_GA_IPsec_and_SSLVPN.msi directly from your organization's Sophos Firewall Web Admin Console or via your Sophos Central partner account.
If you have received the .msi file from your IT department: