Always verify checksums from official Sophos sources. Typical SHA-256 for the legitimate 2.5.0 GA release (example – replace with actual from Sophos):
To run Sophos Connect 2.5.0 GA, you'll need: sophosconnect 2.5.0 ga ipsec and sslvpn.msi