SSL VPN tunnel established.
Under the hood, the SSL VPN component uses an updated OpenVPN 3 library. Version 2.5.0 GA specifically patched the CVE-2023-2840 vulnerability (Windows Installer privilege escalation). If you are still using an older client, this security fix alone justifies the upgrade. sophosconnect 2.5.0 ga ipsec and sslvpn.msi
: Administrators can download the installer from the Remote access VPN section of the Sophos Firewall web admin console. SSL VPN tunnel established