Strategies: Troubleshooting
Build an IPsec debug target with strong logging capabilities.
Reduce complexity by enforcing product standards, and ensuring number of device/vendor combinations is minimal.
Structure access network with a device that accommodates simple packet inspection.