I have two 7120's running IOS 12.1(5)T for IPSEC 3DES for VPN connectivity (PreShared Keys). I have been told that 12.1(5a)E2 resolves some issues for IPSEC, and 3DES. Although I haven't been having any problems, I'm about to add twice as many VPN's ...