VPN IPSec / SSL

ITBT — Mon, 09 Nov 2015 12:54:53 GMT

Hello,

i have the problem with understanding How my VPN works.

I have created one portal and gateway for all users profile and I generate for all of them unique certifcate.

When i look in to Remote Users table I see that some of users uses SSL and another IPsec type of tunnel.

Can someone explain me why one user uses SSL but another IPSec?

Thank you in advance for any answer.

Re: VPN IPSec / SSL

Raido_Rattameister — Mon, 09 Nov 2015 12:59:36 GMT

GlobalProtect agent tries to connect over IPSec as it has less overhead (TCP packets are encapsulated into UDP).

If this fails (maybe clients are in network that don't allow outgoing IPSec) then GP will fall back to SSL.

SSL is TCP in TCP that has more overhead and a bit less throughput but it usually works well.