IPsec

The SecGW is an IPsec aggregator. SecGW is typically used as a dial-up VPN responder, and deployed using IKEv2 as recommended by 3GPP. FortiOS fully supports IKEv2 and ESP. In some setups, where FortiGate is deployed in FGSP clusters, and traffic is load balanced using ECMP, it is desirable to ensure that both the IKEv2 and ESP sessions are forwarded to the same cluster member, which can be ensured by the use of NAT-T. FortiOS supports NAT-T.

IPsec

The SecGW is an IPsec aggregator. SecGW is typically used as a dial-up VPN responder, and deployed using IKEv2 as recommended by 3GPP. FortiOS fully supports IKEv2 and ESP. In some setups, where FortiGate is deployed in FGSP clusters, and traffic is load balanced using ECMP, it is desirable to ensure that both the IKEv2 and ESP sessions are forwarded to the same cluster member, which can be ensured by the use of NAT-T. FortiOS supports NAT-T.