[FW-1] IKE VPN Phase 2 initiator question.

["Drake, Brian" <Brian_Drake@FW1-NOSPAMCENTRALTECHNOLOGY.NET>]

We are setting up a situation where a remote client will initiate a VPN with us. They can't do it if the phase 2 is initiated by my firewall (4.1sp5) with UDP. From what I have read, phase 2 is udp, but I can't tell who initiates that connection in my configuration. If my firewall will initiate the phase 2, is there a way to force it to use TCP or force the remote client to initiate phase 2?

 

Thanks

 

Brian Drake

Central Technology Services