For internal GW what happens when you create non tunnel-mode GW? Why would one do this?

[junior_r]

Hi,

For internal GW what happens when you create non tunnel-mode GW? Why would one do this? If it only provides USER-ID why is it used?

[LukeBullimore]

Hi @junior_r

Enabling tunnel mode uses IPSec as the protocol for tunnel termination instead of SSL. Naturally, this is going to provide better throughput since IPSec is UDP and SSL is TCP.

Enabling tunnel mode allows you to utilise more granular settings for the gateway such as

Maximum number of users connected, X-Auth Support (Allows mobile devices to connect using inbuilt VPN) and the ability to attach a GlobalProtect IPSec Crypto profile - giving you more control over the authentication and encryption algorithms that are used to negotiate keys over the tunnel.

Thanks,

Luke.