[c-nsp] VPN 3000 Connectivity Problems

[Jimmy Changa]

I'm trying to figure out a connectivity problem with my VPN 3005 box.

I have some applications (windows messanger for exchange and "users
and computers") that run very slow over the VPN tunnels (ipsec and
pptp), I thought maybe I had some fragmentation issue. I tried the
usual settings(setting "Fragment prior to IPSec encapsulation without
Path MTU Discovery (Clear DF bit)") etc. and it doesnt seem to make a
differance.

I noticed in a debug the following messages when ever I launch the applications:

Apr  9 18:16:10 vpnserver 443286: 2005 Apr 09 18:16:10.080 EDT -4:00
%IPSECDBG-7-16: RPT=49: 10.1.2.11: User [*****] Inbound IPSec policy
check failed for packet
Apr  9 18:16:10 vpnserver 443287: 2005 Apr 09 18:16:10.080 EDT -4:00
%IPSECDBG-7-16: RPT=50: 10.1.2.11: User [*****] Inbound IPSec policy
check failed for packet

Has anyone seen this before or might they be able to help me figure this out?

JC