The "Sophos Connect Service" must be running in the background for the UI to function.
Are your users seeing a specific (like "Service not responding")?
Users no longer need to know the difference between IPsec and SSL.
If the client opens but is empty, ensure the user has downloaded their policy from the Sophos User Portal or that a provisioning file has been pushed to C:\Program Files (x86)\Sophos\Connect\import .
If the installer or the client isn't working as expected, check these common roadblocks:
If one protocol is blocked by a local network (like a hotel Wi-Fi), the other may still work.
Use the /quiet or /qn switches to install without user interaction.
The Sophos Connect client is the successor to the older SSL VPN client and the original IPsec-only Sophos Connect. The "250GA" in your keyword typically refers to version 2.2 or similar GA releases.