Having trouble connecting with IPSec over TCP

Archived from groups: comp.dcom.vpn (More info?)

I'm trying to connect to a Cisco 3005 concentrator using IPSec over TCP
(port 10000). The client and the concentrator are both set up to allow
it, but the log window seems to show a bunch of TCP SYNs and nothing
else.

The public interface is using the public filter, and I'm suspecting
that it isn't allowing the tcp/10000 connections through.

- Is this so?
- Is it normal to have to add rules to the filter to handle that?
- What exact rules do I add?

Thanks!