SSL remote access VPNs by encapsulating IPsec traffic over TCP connections

Junos OS supports SSL VPN connections from users running third-party NCP Exclusive Remote Access Client on Windows and MAC OS devices. In many public hotspot environments, UDP traffic is blocked while TCP connections are allowed. To support these environments, SRX Series devices can encapsulate IPsec messages within a TCP connection. This implementation is compatible with the NCP Exclusive Remote Access Client, which can be downloaded from https://www.ncp-e.com/ncp-exclusive-remote-access-client/. A two-user license is supplied by default on SRX Series devices; a license must be purchased and installed for additional users.