Hi, we've been experiencing the same issues here. The solution is to upgrade to SoftRemote, by safenet. It appears they bought SSH OEM (makers of Sentinel). SoftRemote as a program in my opinion is not as easy to use or configure as Sentinel. However once configured it does work well and it does work with x.509 certificates + L2TP. We have also managed to get it to work it iKey 3000
I will post soon on this Board a How-To if anyone is interested.
Yes the SoftRemote Client is very easy to use but it has no integreated firewall! And if you work with different profiles on XP any user can connect the VPN - its possible to import the Cert. an protect them with a password - but users are very careless and store this password local ;-)
As far as I know there are two forms of softremote, the LT version and not LT, the LT version does not have a firewall and the non LT version has a modified ZoneAlarm.
The How-To will be compiled over the weekend, as far as the different user profiles is concerned, we invested in some iKey 3000, which store the x.509 certificate on. They themselves are pin protected and work very nicely wth SoftRemote
medic the PIN protection was in respect of the iKey 3000. In this I mean when SSH looks for the private key of the certificate it prompts the user to enter a PIN to unlock the iKey 3000 USB Dongle.