Marcus,In addition to the suggestions here, you might also try configuring the remote device to synchronize it's clock using NTP over the VPN tunnel. You can set the source interface of the NTP requests to be an interface that has rights to traverse ...