Abstract: Methods and systems for transmitting and receiving data between a first node and a second node through a first tunnel group and a second tunnel group respectively. The first node transmits data to the second node mainly through a first tunnel group and receives data from the second node mainly through a second tunnel group. In some embodiments, the first node receives first IP packets from one of its LAN interfaces and then transmits encapsulated first IP packets and then are transmitted mainly through a first one or more WAN interfaces to the second node. The first node receives encapsulated second IP packets mainly from the second node through a second one or more of its WAN interfaces. Second IP packets are then de-capsulated and transmitted through one of the LAN interfaces of the first node.

Abstract: Methods and systems for identifying Internet Protocol (IP) data sessions at a VPN gateway. The VPN gateway receives encapsulating packets, wherein the encapsulating packets encapsulate IP packets. A corresponding VPN connection through which the encapsulating packets are received is identified. The VPN gateway decapsulates the encapsulating packets to retrieve the IP packets and performs deep packet inspection (DPI) on the IP packets in order to identify one or more data sessions that the IP packets belong to. A DPI database is updated accordingly, based on, at least in part, the one or more data sessions.