RE: S2S IPSec VPN between 9.402-7 (after update from 9.355) UTM and second 9.355 broken ipsec_starter no default route - cannot cope with %defaultroute!!!
maybe it is a but in this Version 9.402[st]
downgrade to 9.355 and wait for the next patch[:D]