VPN problem with Win2000 updating domain policy

[blove]

I am using a sgs5440 at the host and sgs420's at the remotes. My problem is that my AD policies are not updating. I think the problem is due to the size of the icmp that is sent from the remote clients back to the DC.

Is there a way to change the VPN tunnel to allow the larger ping?

This would be much easier than changing all of the clients.

Thanks,