I wear the other hat (use hardware VPN). We run large numbers of VPNs over DSL (Telecom and TelstraClear) and don't experience any issues. It wont be the hardware used in the Exchanges (baring a hardware issue, such as a bad port). Assuming your ISP is not running out of bandwidth, it wont be your ISP. Your first guess, the DSL router at the CPE end is the most likely culprit. If your using UDP encapsulation you may find it is deleting the NAT translations. If you have an option to turn on ISAKMP keep alives, try that. -----Original Message-----

Can anyone please give me a pointer as to why I am having big problems

with using a Safenet VPN client (conecting to) -> Netscreen VPN/FW appliance via Jetstart / UBS / Jetstream ? This is happening on multiple disassociated / unrelated networks. ... Its just barely possible that this also applies to the hardware used in the exchanges and ISPs.