I have set up an IPSec tunnel between two firewalls. These are in seperate locations. The tunnel runs ok although sometimes I lose connection between firewalls. The tunnel states that it is running, but when I do a ping test I get request timed out. A simple disable/enable to reset the tunnel will bring the connection back online.

I am thinking of using the Dead Per Detection. Has anybody used this? and what does it do?

Which firewall software are you using? Is this a commercially available hardware firewall, or an open source based software firewall?

We have done a fair amount of software based IPSec installs and have yet to hear about Dead Per Detection.

Peter