Sophos Network Agent allows a local network user to authenticate himself/herself to the Sophos XG Firewall with an Android device. Once the connection is established and the user is recognized, the device can be used for browsing through the Internet, according to the current user policy set up by the administrator. More information can be found here.