I have set up a 10-site worldwide VPN using two PIX firewalls in a failover bundle at each site. Keepalives are enabled on all units. I have a problem where tunnels are prematurely cleared down at one end, but not at the other end. The problem does not exist if I disable keepalives. Has anyone else experienced this problem?
