• Allows dynamic configuration of end-user policy, requiring less manual configuration by end users and field technicians, thus reducing errors and further service calls.
• Allows the provider to change equipment and network configurations as needed, with little or no reconfiguration of the end-user equipment.
• Provides for centralized security policy management.
• Enables large-scale deployments with rapid user provisioning.
• Eliminates the need for end users to purchase and configure external VPN devices.
• Eliminates the need for end users to install and configure Cisco VPN Client software on their PCs.
• Offloads the creation and maintenance of the VPN connections from the PC to the router.
• Reduces interoperability problems between the different PC-based software VPN clients, external hardware-based VPN solutions, and other VPN applications.
• Sets up a single IPsec tunnel regardless of the number of multiple subnets that are supported and the size of the split-include list.