After talking with Watchguard today, we changed my security from MD5 3DES to MD5 DES, took of the PFS, changed the SA Life to 24, took off the NAT Traversal checkbox, found out I had the wrong number range in my resourses (had xx.xx.x.x/24 and should be xx.xx.x.x./16), and deleted all my IPSec...