| Metric | IPsec (IKEv2) | SSL VPN (TCP) | | :--- | :--- | :--- | | | 485 Mbps | 320 Mbps | | Latency added | +2ms | +12ms | | Multicast support | Yes | No | | Proxy traversal | Poor (NAT issues) | Excellent (HTTP CONNECT) | | CPU overhead | 8-12% | 15-20% |

You can push the configuration during the MSI deployment by placing the configuration files in the appropriate folder via script: C:\Program Files (x86)\Sophos\Connect\import\

If any check fails, the component quarantines the endpoint, granting only limited access to a remediation VLAN.