Update SSL VPN Client for Parity with Latest OpenVPN Features
Sophos XG pushes a number of options in SSL VPN which are undesirable in some deployments. I have already voted on an idea to expose more server side customisation.
Likewise, the latest OpenVPN client has a number of new features and improvements not reflected in the version source version Sophos is using.
Specifically, the pull-filter option available in OpenVPN 2.4 is a feature we really need for several customer deployments, it offers significantly more ease of use and flexibility than the route-nopull / route-noexec currently supported by Sophos SSL VPN client.
Support advised to try using the OpenVPN client instead but it does not appear to be compatible with the server version on XG and throws an error.
according case 9232646 this should be availibe in calendar Q1 2020.