Hi Alexander, > So is it required to put IP address inside gateway side certificate or > is it possible to go around of this constraint somehow? Yes, the hostname or IP configured in the VPN profile has to be contained in the certificate as subjectAltName. There is currently no way around this. Regards, Tobias