In-Reply-To: <9D048F4A422CD411A56500B0D0209C5B03D74E75@NS-CA> SonicWall didn't support DH Group 2 or 5 until firmware 6.2.0.0 - so phase 1 failures would point to the Netscreen refusing 768 and the SonicWall running an older version. fwiw, Charlie. VPN is sponsored by SecurityFocus.com