To activate the SSL-VPN options for a device
In the Settings section, click the SSL-VPN slider to activate SSL-VPN support.
In the Certificate section, from the Client Certificate drop-down list, select the certificate you want used for the policy.
The CT VPN supports the certificate option where as NX VPN does not.