Environment : This article applies to all the controllers running OS version 5.x or 6.x.
A VIA client automatically detects whether the user is connected to a trusted or untrusted network by sending a HTTPS HEAD request to the
internal IP of the controller <https:// <controller’s internal ip>/via >. If the VIA client receives a HTTPS response with the expected X-VIA header, the user is considered to be on a trusted network. An IPsec connection is established only if the user is connected to an untrusted network.