Add support for Sophos Connect GUI version (scgui. exe) in VPN Add-on.

Not planned

Add support for Sophos Connect GUI version (scgui. exe) in VPN Add-on.

1 vote

avatar

Hello,
Currently, the Sophos Connect add-on in Remote Desktop Manager expects the application to be installed under:
C:\Program Files (x86)\Sophos\Connect\
and it launches the executable sccli.exe.
However, the latest versions of Sophos Connect (as distributed with Sophos XGS/XG firewalls) are installed instead under:
C:\Program Files\Sophos\Connect\GUI\
and the available executable is scgui.exe — there is no sccli.exe in this installation package.
Because of this, RDM cannot currently launch or control the Sophos Connect VPN connection when only the GUI version is installed.
I kindly request adding compatibility with this newer structure and executable, allowing RDM to:

  1. Detect or browse to the GUI-based installation path, and
  2. Launch the VPN through scgui.exe if sccli.exe is not available.

This would ensure full integration with all current Sophos Connect deployments.
Thank you for considering this improvement.

All Comments (5)

avatar

Hello,

Do you know if scgui.exe has command line parameters that would allow to send all the necessary information to connect? If they don't have this then it would not be possible for us to support this executable for the integration.

Regards,

Hubert Mireault

avatar

Hello, as far as I know, the scgui.exe file included with the current Sophos Connect installation (version 2.x and later) does not expose public command-line parameters similar to those of sccli.exe. The GUI version is primarily designed for end users, allowing them to import .tgb profiles and connect manually from the interface. Unfortunately, it does not provide CLI automation capabilities that could be used by external applications such as RDM. The sccli.exe binary was part of previous Sophos Connect builds (typically installed in C:\Program Files (x86)\Sophos\Connect\), but is no longer distributed in the modern 64-bit installer, which now only includes the GUI folder with scgui.exe. Couldn't RDM run it without any additional parameters?

avatar

If you would like to run the executable without any parameters, then you could use the command line entry (or even the Custom VPN entry) to achieve this.

Unfortunately since the scgui executable doesn't support additional parameters, I don't think it would make sense to include support for it in the Sophos Connect entry.

Regards,

Hubert Mireault

avatar

Thank you for your clarification.

From a user’s perspective — not as a developer — I believe that one of the main expectations is to be able to manage all VPN connections within a single platform like RDM.
Even if the scgui.exe executable cannot accept command-line parameters, the possibility to preload connection data by reading the .tgb configuration file would already represent a real improvement. It would be far more convenient than having to manually enter all parameters, as was common practice ten years ago.

Moreover, implementing such support would demonstrate that RDM continues to evolve in step with the latest products and technologies currently available on the market.

In any case, regardless of the direction you decide to take, I sincerely thank you for considering this request and for your time.
Best regards,
Marcello Nardeschi
Methodus Informatica S.r.l.

avatar

Thank you for your thoughts, I understand why it could be beneficial in your situation to allow this. We have to weigh different considerations, as it would bring a few challenges, notably for the clarity when using the integration (why in one case it would work and send all the information, but not in another).

We'll monitor this thread for additional feedback to help us prioritize this request.

Regards,

Hubert Mireault