Still having issues with ipsec site to site. have 2 XG's out there connecting via ipsec, one always drops off the ipsec so I have it on SSL now. However I thought I read that we could only have a limited number of ssl site to site and I will need to add about 8 more remote XG's this summer.
Apologies to hear about your continued IPsec issues. Have you already upgraded to MR8? If so, would it be possible to PM me with information regarding your IPsec connection and Policy configurations along with the output from these logs when this issue occurs. (/log/charon.log and /log/strongswan.log)
For reference, your hardware is the variable that determines how many VPN tunnels (IPsec or SSL) that you are able to properly support. I've attached a sizing guide (slightly older) that provides a suggestion regarding how many concurrent IPsec and SSL VPN tunnels are able to properly run per device model. Please note that this is a rough estimate and your mileage may vary. 
Regards,
