Branch Gateway includes a security mechanism through which the system administrator defines users and assigns each user a username, password, and privilege level. The privilege level of the user determines which commands the user can perform.

Branch Gateway also supports secure data transfer through SSH, HTTPS and SCP.

You can configure Branch Gateway to work with an external RADIUS server to provide user authentication. When you enable RADIUS authentication on Branch Gateway, the RADIUS server operates with Branch Gateway security mechanism. When the user enters a username, Branch Gateway first searches its own database for the username. If Branch Gateway does not find the username in its own database, it establishes a connection with the RADIUS server. The RADIUS server, then, provides the necessary authentication services.