Dial up tunnel - syn and syn ack are on different blades even though ipsec-tunnel-slot set to master. UESP packet drop occurs when VPN peer uses different source ports for IKE-NATT and UESPWorkaround: Add a flow rule to work around the issue