Well if you are going to run that type you will need to cut the firewall. If you dont wanna do that then go with a CSR one piece one. You will still need to massage the tunnel a bot but wont have to remove any part of the firewall.
"I am not ashamed to confess I am ignorant of what I do not know."
