IPsec VPN features that are not supported

FortiOS 5.6 for FortiGate-6000 and FortiGate-7000 does not support the following IPsec VPN features:

• Policy-based IPsec VPN is not supported. Only tunnel or interface mode IPsec VPN is supported.
• Policy routes cannot be used for communication over IPsec VPN tunnels.
• Remote networks with 0- to 15-bit netmasks are not supported. Remote networks with 16- to 32-bit netmasks are supported.
• IPv6 clear-text traffic (IPv6 over IPv4 or IPv6 over IPv6) is not supported.
• Load-balancing IPsec VPN tunnels to multiple FPCs or FPMs.
• IPsec SA synchronization between HA peers is not supported. After an HA failover, IPsec VPN tunnels have to be re-initialized.

• Dynamic routing (RIP, OSPF, BGP) over IPsec VPN tunnels is supported.
• The FortiGate-7000 does not support load-balancing IPsec VPN tunnels to multiple FPMs. All IPsec VPN tunnels are terminated on the primary FPM and traffic between IPsec VPN tunnels is supported.