Starting from Jumbo Hotfix Accumulator for R81 Take_34, Scalable Platforms are aligned with the following standard Security Gateway features: 

• VPN Tunnel Interface (VTI)
  • Route Based VPN
  • Enable BGP and OSPF Dynamic Routing Protocols on VTIs

• Tunnel Management - Permanent Tunnels
  • Tunnel Testing for Permanent Tunnels
  • Dead Peer Detection (DPD)
• Link Selection
  • Service Based Link Selection (sk56384)
  • IP Selection by Remote Peer
    • High Availability
    • Load Sharing
  • Outgoing Route Selection
    • Route-based probing
• Back-to-back tunnels (hub and spokes)
  • Maestro as a Center in a Star community - Satellite peers can communicate with each other through the Center
  • Client-to-Site Traffic over a Site-to-Site VPN Tunnel (Client > Maestro > Peer > resource)
  • Client to Site to Client through a Maestro Gateway (Client > Maestro > Client)
• VPN local connections originated from Maestro SGMs
  • Initiate a connection from an SGM if the connection's destination requires encryption
  • Identity Awareness via VPN - The Identity Source (users database) can be located across a VPN tunnel (especially in the cloud).

Note that due to major design changes, an upgrade from Jumbo Hotfix Accumulator for R81 (lower than Take_34) to Jumbo Hotfix Accumulator for R81 (Take_34 and higher) requires a maintenance window, because VPN traffic impact is expected.

Note that all SGMs should run on Jumbo Hotfix Accumulator for R81 Take_34 and higher (running with incompatible versions can cause VPN traffic impact). 

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.