
I think this is used to solves issues relating to fragmented packets, NAT, large UDP packets and port filtering.

Mobile Access: Required for mobile and SSLVPNĬheckpoint uses IKE over TCP were a full TCP session is opened between the peers for the IKE negotiation during phase1.Policy Server: Required if want to enforce a Desktop server policy on the client (firewall).

