Hi Esther, I made only bad experience with CVPN. I always recommend to use content switching with an aaa for front authentication and sso, there has to be no rewriting so most of all websites will be offloaded successfully without any page problems. Also no need for gw plugin or published Apps.