I believe someone at Sophos could create a program to generate this from the settings or from the.
Sophos vpn client It is crazy to have all the tools to manage and upgrade UTM software to get rid vulnerabilities like heartbleed but not bother with tools to manage the client software also provided from the UTM.