# VPN elements

You can view the types of elements used for configuring VPNs, and inbound and outbound traffic management.

Table 1. Types of elements in the VPN configuration
Element Type | Explanation
--- | ---
Policy-Based VPNs | Configurations particular to a VPN between two or more VPN gateways.
Route-based Tunnels | Configurations particular to VPN tunnels between Engine interfaces that are designated as tunnel endpoints.
Traffic Handlers | Configure outbound and inbound traffic management features (load balancing and high availability).
Application Access Portal | Application Access Portals | Configurations particular to Engines that act as Application Access Portals.
Application Access Policies | Application Access Policy elements that define which services are available in the Application Access Portal and which users can access the services.
Application Access Services | Application Access Services that are used through the Application Access Portal.
Application Access SSO Domains | Application Access SSO Domains where the same user name and password are valid.
Application Access Service Profiles | Defines the settings for SSO and cookie protection in the Application Access Services.
VPN Gateways | Configurations particular to individual VPN Gateways, such as IP address information.
Other Elements | Connection Types | Connection type elements that define how VPN endpoints are used in a Multi-Link configuration.
Tunnel Groups | Tunnel Group elements for monitoring Route-based Tunnels.
Profiles | Gateway Profiles | Information about the capabilities of particular types and versions of VPN gateway devices. Allow automatic configuration validation.
Gateway Settings | Advanced global Engine settings related to VPN performance tuning.
VPN Profiles | The main authentication, encryption, and integrity checking settings for VPNs.
QoS Classes | An identifier that can be assigned to network traffic to define QoS policies for the traffic.
TLS Cryptography Suite Sets | Settings that define which cryptographic algorithms are allowed to be used in the SSL VPN.
VPN Certificates | Gateway Certificates | Certificate issuers whose signature is accepted as proof of identity on certificates in one or more VPNs.
VPN Certificate Authorities | Certificate issuers whose signature is accepted as proof of identity on certificates in one or more VPNs.