Not very familiar with ipsec tunnels, but I do use OpenVPN with my XG firewall. It provides SSL VPN, comes with the home license.Interesting to know about the hardware. I bet that home license wouldn't included ipsec tunnels for free though.
Remember, with XG version, you don't have an ip limit. Only limit is the hardware.