Alex, I should add then when I was contacted by our own IT security folks about this, we were abloe to arrive at a mutually acceptable approach to firewall port management issues for AH, ESP, and UDP for IKE. So, I think it is largely a matter of education. steve