I have two questions: 1) Why is it necessary for an SA involiving a Security Gateway to be in Tunnel Mode? 2) What are auditable events (how are they defined?)? Regards