I've installed a VPN cluster (2xASA5550).
Some of the VPN-Clients are using IPsec over TCP to connect. If the vpnclient configures the real ip address of asa everything works fine. If the vpnclient configures the cluster ip address no connection could established.
BTW load sharing with ipsec over udp is working without problems.
Doesn't vpn load sharing work with ipsec over tcp ?
Any experience ?