When TLS is on for a CLI-based connection, the default TD2 mechanism automatically bypasses the cryptographic services provided by TLS on systems that have installed the enhancement-supported versions of TDGSS, Gateway and CLI/TeraGSS. This improves connection times. If these conditions are not met, then valid logons succeed as usual.