Alternative to TMG2010 for IPsec Tunnels

Hey guys,

I recently got a request to change the key exchange lifetime for one of our ipsec tunnels. This lead me to the conclusion that such a change is not possible with tmg / windows adv firewall, because I would need to change this value as a default value for all connections!?

Now I am a little bit clueless because since migrating to TMG2010 we used WinAdvFW in addition to TMG (yes this works perfectly with our setup :) ), but such a change is imho not possible with this setup.

Do you have any alternative solutions for managing multiple IPsec tunnels (30+) with completely different parameters such as key exchange lifetime, shared secrets, certificates and so on, connection based?

Thanks for every hint :)

Best regards