Hi Martin, you have to set the "Key lifetime limit" in phase 2 to a proper time value. My utm edge-x wants to negotiate every 10 min for phase 2. If the vpn clients is not configured with the right value, the vpn tunnel will be closed by the appliance. Regards, Sven