Basic Combinations – Case 4

• Provides support for a remote host using the Internet and reaching behind a firewall

• Only tunnel mode is required between the remote host and the firewall

• One or two SAs may be used between the remote host and the local host