Hi,
Post BM3.8sp2a all new user certificates not working, no problem with
old certificates.
New certificated users added to exist rule.
In ikelog:

07-16-2004 01:19:17 PM Recieved notify message type -17 from "ip"
07-16-2004 01:19:17 PM Error :No matching Certifcate authentication rule
in server ,check Server Configuration
07-16-2004 01:19:17 PM Notify Recvd :Deleting IKE SA and related QM SAS
- Peer 157.25.137.18
07-16-2004 01:19:17 PM Exiting thread for SendKeepAlivePacketProcess
07-16-2004 01:22:26 PM Created thread for SendKeepAlivePacketProcess
07-16-2004 01:22:26 PM Loaded: 1 private key(s).

Mariusz