A cool function of the new Sophos Client thats available for 17.5 would be if it could be configured on the firewall to auto connect on insecure wifi or away from office. (Both should be options) I have users who would not want this at their house, but I would want to force it if they were connected to hilton wifi or starbucks wifi.