We are currently troubleshooting an issue we are having with Microsoft SMS & the VPN 3000 Concentrator. Currently when we connect to the concentrator and attempt to open SMS Admin Console through the tunnel, the SMS admin connects to the SMS server, but can't perform any of its queries. I've seen some issues regarding MTU size and such, but has anybody else experienced such a problem? Cisco has pointed me to several Microsoft documents, but this is not a Microsoft issue. I can connect to my AS5300 and the SMS Admin works fine, indicating a definate IPSec issue on the VPN 3000.
