Recently, I had some IPSec problems with the new version of code and I had to revert back to the 2.4.5 code to try to resolve the issue. The thing I did was to do a "factory default" while I was on the new image. In most vendors, when you do a factory default, it defaults to the image that came from the manufacturer at the time of shipping. However, on the Netgate box, the image you factory default to is the image that you are currently running. Just FYI.