Correct use of the "add legacy user access" option for VPN remote user authentication

[Matlu]

 Hello, everyone. 

I have inherited an infrastructure that is running a ClusterXL and VPN remote user connections service.  I have noticed something curious in this network, and it is that in the ORIGIN column, the user groups are working with the option of "add legacy user access", and this generates a doubt in my mind. 

Is it mandatory to work the new rules created for remote users with this option?

What does this option in the title of the post refer to? 

Thanks for your comments.

[_Val_]

This is unclear, can you elaborate please, maybe with some screenshots?

[PhoneBoy]

The only reason you might use the legacy option is in an environment where you’re not using Identity Awareness, but would strongly encourage against it.
Access Roles are the way to go here.