QUESTIONS:
1.  Is the filter certificate defined correctly ?
2.  Should I use another certificate, if so what ?
3.  How do I define Diffie-Hellman group, specify PFS2 ?  

[code]
ipseccmd -w REG -p "Test Filter" -r "Limit TCP/135" -f $SourceAddress/$SourceMask+0:135:TCP -n -a cert:"C=US, O=First Data Digital Certificates Inc., CN=First Data Digital Certificates Inc. Certification Authority" PASS -1p -c
[/code]