Hi, this is Emmanuel from the Sophos Community, today I will be talking about how to configure
the Sophos Network Agent on iOS 13 and later.
If this video resolves your issue, / click the thumbs up on techvids to let us know,
/ or like, comment and subscribe on YouTube. In this video we will use the version 18 of
the Sophos Firewall and an iPhone running iOS 14
First, we need to a create a Self-Signed certificate on the Sophos Firewall, and set it as the
Certificate for the Admin and User Portal. To create the Self-Signed certificate, go
to System >> Certificates >> Certificates >> click ADD >> Select Generate Locally signed
certificate, enter the name of the Certificate, extend the validity of the certificate to
2 years, but not more this is due to an apple restriction.
Under common name enter the FQDN of the XG Firewall.
Scroll down to Subject Alternative Names and for DNS names you can enter your organization
domain. Click Advanced Settings and change the Certificate
ID to IP and enter the Public IP of your XG Firewall.
After saving it, go to Certificate Authorities, and Click the Download bottom for the Default
Certificate, we will send this certificate to the user later.
Next go to Administration >> Device Access >> and enable Client Authentication, for the
Zone you want to use to authenticate users, usually the WiFi.
Move to Admin and user settings and for Certificates, select the Self Signed Certificate we just
created and click apply. To test the CAA we create a test user we will
be using on the iPhone. Once we finish creating the user, send the Default Certificate to
the user via Email. Note: If you use Sophos Mobile you can also
distribute the Default Certificate automatically
On the iPhone go to the Mail Application, locate the email and click the Default.pem
certificate, you will get a pop-up messages saying “Profile Downloaded”, to activate
this Certificate go to Settings >> Profile Downloaded >> Install >> Install >> Done (you
will get prompted to enter your iPhone unlock code)
Once installed go to Settings >> General >> About >> scroll all the way down to Certificate
Trust Settings >> you will find the Sophos Firewall certificate we just installed here,
enable it to trust it. If you haven’t downloaded the Sophos Network
Agent, now it is the time to do it, go to the App Store and search for “Sophos Network
Agent” and install just like any other app. Now access the User Portal from your iPhone,
and go to Download Client >> Install client certificate in iOS 13 and later, once you
click download you will get a prompt asking you to select Sophos Network Agent, click
it and the Network Agent will open, if both certificates were successfully installed you
should see only a Success message. Now enter your Username and Password click
Login and you should see “Connected” Note: When your mobile phone is locked or
when network connectivity is lost, you’ll disconnect from the application and your device
is no longer authenticated. Relaunch the application to connect again. I personally prefer to set
the Network Agent to not use Auto Login. To manually disconnect simply click Logout
As the Admin of the Sophos Firewall, you can see the Authenticated users under Current
Activities >> Live Users, they will be fall under the iOS client type.
Hope you found this video useful! Let us know by hitting the thumbs to give us feedback
on techvids, or on youtube in the comments. Check out the documentation for this video
in the video description, and go to techvids.sophos.com for more great videos like this one!
Bookmark techvids, subscribe on youtube, and view and post questions on community.sophos.com.
Thanks for watching, take care.