Alex, >Has anyone had deployment experience with IKE? >Do actual customers like it running over UDP? >Is there any resistance with opening an IKE UDP >port in firewalls? Folks at several companies have cited problems getting IPsec traffic through in general, whether UPD for IKE or AH or ESP. Steve