FW-CACS: Active IPsec VPN tunnels