define({"topics" : [{"title":"Using a dynamic IP address for a VPN endpoint ","shortdesc":"<p class=\"shortdesc\">The following restriction applies when a VPN endpoint has a dynamic IP address that has been assigned using DHCP, PPPoA, or PPPoE. <\/p>","id":"GUID-AFE5DFB1-7D12-4453-AAA0-26988DAD23D7","href":"GUID-AFE5DFB1-7D12-4453-AAA0-26988DAD23D7.html","menu": {"hasChildren":false,},"tocID":"GUID-AFE5DFB1-7D12-4453-AAA0-26988DAD23D7-d58e149846","topics":[]},{"title":"Using a NAT address for a VPN endpoint ","shortdesc":"<p class=\"shortdesc\">VPN traffic is protected against modifications, so there are some restrictions when NAT is applied to the encrypted traffic. <\/p>","id":"GUID-5BD6F755-A656-4206-884D-45F46F96D94C","href":"GUID-5BD6F755-A656-4206-884D-45F46F96D94C.html","menu": {"hasChildren":false,},"tocID":"GUID-5BD6F755-A656-4206-884D-45F46F96D94C-d58e149877","topics":[]},{"title":"Define endpoints for VPN Gateway elements","shortdesc":"<p class=\"shortdesc\"> Each endpoint is dedicated for one VPN Gateway element.    <\/p>","id":"GUID-938F4C10-F0C3-4819-87AA-6D7E6BBCA5A8","href":"GUID-938F4C10-F0C3-4819-87AA-6D7E6BBCA5A8.html#GUID-938F4C10-F0C3-4819-87AA-6D7E6BBCA5A8","menu": {"hasChildren":false,},"tocID":"GUID-938F4C10-F0C3-4819-87AA-6D7E6BBCA5A8-d58e149908","topics":[]},{"title":"Create an External VPN Gateway element","shortdesc":"<p class=\"shortdesc\">External VPN Gateway elements represent third-party VPN devices or <span class=\"keyword\">Forcepoint NGFW<\/span> devices managed by a different Management Server. To use third-party         VPN devices or <span class=\"keyword\">Forcepoint NGFW<\/span> devices managed by a different Management Server in VPNs, create an External VPN Gateway element.<\/p>","id":"GUID-851ECF59-B2AD-48E1-97D4-DEF0313745CF","href":"GUID-851ECF59-B2AD-48E1-97D4-DEF0313745CF.html#GUID-851ECF59-B2AD-48E1-97D4-DEF0313745CF","menu": {"hasChildren":false,},"tocID":"GUID-851ECF59-B2AD-48E1-97D4-DEF0313745CF-d58e150124","topics":[]},{"title":"Define endpoints for External VPN Gateways","shortdesc":"<p class=\"shortdesc\"> Each endpoint is dedicated for one External VPN Gateway element.    <\/p>","id":"GUID-F40871D5-06CF-4F07-935C-9892E57F83E9","href":"GUID-F40871D5-06CF-4F07-935C-9892E57F83E9.html#GUID-F40871D5-06CF-4F07-935C-9892E57F83E9","menu": {"hasChildren":false,},"tocID":"GUID-F40871D5-06CF-4F07-935C-9892E57F83E9-d58e150211","topics":[]},{"title":"Restrict the trusted CAs for a VPN gateway","shortdesc":"<p class=\"shortdesc\"><dfn class=\"term\">Certificate Authorities<\/dfn> (CA) verify certificate authenticity with their signatures. By default, the gateways trust all VPN CAs, but you can restrict the trusted CAs. <\/p>","id":"GUID-B3B0DE47-9276-408B-9889-861A1217F59A","href":"GUID-B3B0DE47-9276-408B-9889-861A1217F59A.html#GUID-B3B0DE47-9276-408B-9889-861A1217F59A","menu": {"hasChildren":false,},"tocID":"GUID-B3B0DE47-9276-408B-9889-861A1217F59A-d58e150323","topics":[]},{"title":"Define VPN client settings for <span class=\"keyword\">NGFW<\/span> Engines","shortdesc":"<p class=\"shortdesc\">VPN client settings in the Engine Editor define the settings that are used when the <span class=\"keyword\">NGFW<\/span> Engine acts as a VPN Gateway in a mobile VPN. <\/p>","id":"GUID-395358F7-68E2-47B1-84E4-6338E48012F3","href":"GUID-395358F7-68E2-47B1-84E4-6338E48012F3.html#GUID-395358F7-68E2-47B1-84E4-6338E48012F3","menu": {"hasChildren":false,},"tocID":"GUID-395358F7-68E2-47B1-84E4-6338E48012F3-d58e150419","topics":[]}]});