Previous versions sometimes required separate downloads for IPSec vs. SSL. Version 2.5.0 GA delivers a single file that detects firewall configuration and activates the appropriate protocol stack dynamically.
If you are using the older “Sophos SSL VPN Client” (version 1.x) or a standalone OpenVPN client, you must migrate to Sophos Connect 2.5.0 GA. sophosconnect 2.5.0 ga ipsec and sslvpn.msi
Since this MSI supports both, you must decide which protocol to assign. Here is the 2.5.0 GA breakdown: If you are using the older “Sophos SSL
| Feature | IPSec (IKEv2) | SSL VPN (OpenVPN) | | :--- | :--- | :--- | | Speed | Excellent (Kernel mode) | Good (User mode) | | TCP Optimization | Poor (Drops packets under loss) | Excellent (via TCP/443) | | Corporate Proxy | Difficult (ESP protocol blocked) | Easy (Looks like HTTPS) | | Multi-Factor Authentication | Limited (Certificate + PSK) | Full (SAML, TOTP, RADIUS) | | Best for... | Site-to-site, stable fiber | Coffee shop Wi-Fi, hotel captive portals | | Site-to-site, stable fiber | Coffee shop Wi-Fi,
Recommendation for 2.5.0 GA: Deploy SSL VPN for sales and remote staff. Deploy IPSec for IT admins and data-center access.