SonicWall Global VPN Client.
IPSec remote access for Windows. Fast, reliable, managed.
The SonicWall Global VPN Client (GVC) is an IPSec-based VPN client for Windows that gives mobile and remote
workers encrypted access to corporate resources over broadband, wireless, and dial-up connections. Because
GVC uses IPSec over UDP rather than SSL over TCP, it delivers faster throughput and lower latency than SSL
VPN under equivalent network conditions. It is best suited for organizations running corporate-managed
Windows devices where performance and centralized configuration control matter.
Expert Pre-Sales AdviceCertified reps reply in 1 hour.
Config & Managed ServicesSkip the setup. We'll do it.
POs · Tax-Exempt · Net 30Welcomed for Corp, Edu, & Gov.
Same-Day ShippingOrder by 3pm EST, ships today.
How It Works
Global VPN Client at a Glance
IPSec over UDP
GVC establishes an IPSec tunnel using UDP rather than the TCP used by SSL VPN. Because UDP does not
carry TCP's retransmission overhead, GVC delivers higher throughput and more consistent latency for
applications sensitive to delay, such as VoIP, video conferencing, and large file transfers over VPN.
The performance advantage is most pronounced on high-latency or lossy connections where TCP
retransmissions compound the problem.
Centralized Configuration
GVC connections are configured through a password-protected .rcf policy file that IT distributes to
each user's Windows device. Users import the .rcf file once and connect with a single click. The .rcf
file enforces the VPN gateway address, pre-shared key, and connection parameters without exposing
configuration details to the user. This model prevents end users from modifying VPN settings or
connecting to unauthorized VPN servers, which is a common control requirement for corporate managed
devices.
Layer 3 Network Access
GVC provides full Layer 3 IP-level network access to corporate resources, the same experience a user
would have sitting at a desk in the office. Remote users can reach any IP-addressed resource on the
corporate network subject to firewall policy. Split-tunnel mode routes only corporate-bound traffic
through the VPN, leaving internet traffic on the local connection. Redirect-all mode routes all traffic
through the VPN gateway for organizations that require internet traffic inspection at the corporate
perimeter.
Security and Compliance
GVC is equally secure to SSL VPN; the difference is at which network layer the security is applied. GVC
applies IPSec encryption at the IP layer (Layer 3), which covers all traffic including non-web protocols
that SSL VPN may handle differently. GVC supports certificate-based authentication using X.509
certificates in addition to pre-shared keys, which satisfies PCI and other compliance frameworks that
require certificate-based VPN authentication. IKE and IKEv2 are both supported.
Running a mixed Windows and Mac environment?
GVC is Windows-only. Mac, Linux, iOS, and Android users need the SSL VPN client instead. Many SonicWall
deployments run both services on the same firewall, with GVC assigned to the Windows corporate device
group and SSL VPN assigned to BYOD and non-Windows users. Our team can walk you through the dual-service
setup.
The SonicWall Global VPN Client (GVC) is an IPSec-based VPN client for Windows that
gives remote users secure, encrypted access to corporate network resources. It is built into every
SonicWall firewall and requires per-seat licenses to enable. GVC uses IPSec over UDP for faster
throughput than SSL VPN under equivalent network conditions, making it a good fit for
corporate-managed Windows devices with high-bandwidth or latency-sensitive workloads.
The SonicWall Global VPN Client supports Windows only. Users on macOS, Linux, iOS,
Android, or ChromeOS need to use the SonicWall SSL VPN client or the SonicWall Mobile Connect app
instead. A single SonicWall firewall can run both GVC and SSL VPN simultaneously, assigning each to
the appropriate user group by device type.
Both are equally secure. The difference is at which network layer the encryption is
applied. GVC uses IPSec at Layer 3, encrypting all IP traffic including non-web protocols. SSL VPN
encrypts at Layer 4 using SSL/TLS. For PCI and other compliance frameworks requiring certificate-based
VPN authentication, GVC supports X.509 certificate authentication in addition to pre-shared keys,
which can simplify compliance attestation for some organizations.
IT administrators distribute a password-protected .rcf configuration file to each
Windows device. The user imports the .rcf file once, enters their credentials, and connects. The .rcf
file encodes the VPN gateway address and connection parameters, preventing users from modifying
settings or redirecting the VPN to an unauthorized server. This centralized configuration model is one
reason GVC is popular for managed Windows fleets.
GVC licenses are sold per seat. Each Windows user who needs VPN access requires one
license. Unlike concurrent SSL VPN licenses, GVC licenses are typically counted against the number of
users rather than the number of simultaneous sessions. Verify the exact licensing model for your
specific firewall model with our team before purchasing, as it can vary across the SonicWall product
line.
Not sure whether GVC or SSL VPN is the right fit for your team?
Tell us your firewall model, operating systems in use, device management approach, and user count. A
SonicWall-certified engineer will recommend the right VPN client type, license count, and configuration
approach, within one business hour.
Login and Registration Form
Existing User