Is there a Sophos idea existing, that the VPN client should be checked for updates when the VPN client dials in ?
if necessary, automatically updated before the VPN client connects.
The download is provided by the XG Firewall and the client is up-to-date without admin rights or end user oder administrator intervention.