Just to clarify to avoid confusion: This only applies to IPSec policies
setup ON MS systems. Two domain controllers behind a Watchguard (or any
vendor for that matter) branch office VPN will have these packets
encrypted while traveling over the VPN.

M. Dante Mercurio, CCNA, MCSE+I, CCSA
dmercurio (at) c. (dot) . [email concealed]

[ more ]