Sophos UTM: Windows User Permissions Required for SSL VPN Client

  • Article ID: 115338
  • Rating:
  • 17 customers rated this article 1.9 out of 6
  • Updated: 08 Apr 2015

This article explains which permissions are required for Windows users to run the Sophos SSL VPN client successfully.

Known to apply to the following Sophos product(s) and version(s):
Sophos UTM Software Appliance
Sophos UTM 625
Sophos UTM 525
Sophos UTM 425
Sophos UTM 320
Sophos UTM 220
Sophos UTM 100/110/120
Sophos UTM 100/110/120

What To Do

A User which is logged in and tries to establish a SSL VPN needs network operation rights.  This allows the SSL VPN Client to set up the network completely (for example, adding the required routes). 

In Windows 7 and 8, the network operations are an administrator privilege. You can either elevate the user to a local administrator, run the SSL VPN client as an administrator, or use the preferred method and add the user to the 'Network Configuration Operators' Windows group.

To add the user to the 'Network Configuration Operators' group:

  1. In Windows, open Control Panel > Administrative Tools.
  2. Open Computer Management.
  3. Expand System Tools > Local Users and Groups.
  4. Click on Groups.
  5. Double click on 'Network Configuration Operators', and click Add...
  6. Type in the username of the user you want to elevate, click 'check names' to ensure accuracy, and click OK.
  7. Click Apply to ensure the changes are saved.
To run the SSL VPN client under administrator mode do the following: 
  1. Create a shortcut to your SSL VPN client and save to the desktop
  2. Right click on the SSL VPN client icon and select "Run as Administrator"
  3. Connect to your SSL VPN using the icon in the lower right taskbar


If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent