I have narrowed a previous issue to this problem. My IPsec compliantfirewall (PIX) expects these to have values (I'm assuming that they
contain the IP and subnets of the BM38 server and the other firewall)populated.

The IKE screen on the BM3.8 server reports "Sending proxy ID type 4".

The PIX reports "testpix(config)# IPSEC(validate_proposal_request):
part #1,
(key eng. msg.) dest=, src=,
dest_proxy= (type=4),
src_proxy= (type=4),
protocol= ESP, transform= esp-3des esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x24
IPSEC(validate_transform_proposal): proxy identities not supported"

Bm3.8 to PIX 501.

Sorry for the dual(ish) post, but I'm in a bind and I thought this
of the issue might have a broader audience than my earlier grasping at