Paul, I generally like your analysis for IKE, but I would also like to suggest that there may be a few "added functions" that should be on the list. For example, we stripped out several negotiation features for phase II which had been supported in the SPD, e.g., port ranges or lists vs. individual port numbers. I'd like to see these added back. Steve