When you configure the Branch Gateway without an external VPN or firewall, Vlan 1 is used to connect the internal Branch Gateway router to the internal Branch Gateway switch. If an external firewall or VPN is connected to the Fast Ethernet port, it is important to disable Vlan 1 to prevent a direct flow of packets from the WAN to the LAN.