The SonicWall Global VPN Client (GVC) is an IPSec-based VPN client for Windows that gives remote users secure, encrypted access to corporate network resources. It is built into every SonicWall firewall and requires per-seat licenses to enable. GVC uses IPSec over UDP for faster throughput than SSL VPN under equivalent network conditions, making it a good fit for corporate-managed Windows devices with high-bandwidth or latency-sensitive workloads.

The SonicWall Global VPN Client supports Windows only. Users on macOS, Linux, iOS, Android, or ChromeOS need to use the SonicWall SSL VPN client or the SonicWall Mobile Connect app instead. A single SonicWall firewall can run both GVC and SSL VPN simultaneously, assigning each to the appropriate user group by device type.

Both are equally secure. The difference is at which network layer the encryption is applied. GVC uses IPSec at Layer 3, encrypting all IP traffic including non-web protocols. SSL VPN encrypts at Layer 4 using SSL/TLS. For PCI and other compliance frameworks requiring certificate-based VPN authentication, GVC supports X.509 certificate authentication in addition to pre-shared keys, which can simplify compliance attestation for some organizations.

IT administrators distribute a password-protected .rcf configuration file to each Windows device. The user imports the .rcf file once, enters their credentials, and connects. The .rcf file encodes the VPN gateway address and connection parameters, preventing users from modifying settings or redirecting the VPN to an unauthorized server. This centralized configuration model is one reason GVC is popular for managed Windows fleets.

GVC licenses are sold per seat. Each Windows user who needs VPN access requires one license. Unlike concurrent SSL VPN licenses, GVC licenses are typically counted against the number of users rather than the number of simultaneous sessions. Verify the exact licensing model for your specific firewall model with our team before purchasing, as it can vary across the SonicWall product line.