We continue to fight battles with ISPs on UDP issues when a local ASA configured with VPNCLIENT stops working with UDP.
The ISP will throttle UDP or else filter or it may even be getting dropped in the path, thus the VPN tunnel drops and won't rebuild.
But if we use TCP in the VPNCLIENT then we can get the same tunnel back up.
My question is this -
Can there be any failover statements built into an ASA VPNCLIENT configuration which could failover to TCP when UDP begins to have this ISP issues?
