Okay, I misunderstood that the connection works but will eventually time out. You allow ICMP (it's a protocol) in your firewall, just like you have done for IP (Internet Protocol). Are they able to initiate the VPN connection from SAP? You need to allow that in your firewall as well.
↧