ENDIAN Firewall - general IPsec issue with 2.3?

Hi,
after discovering I cannot upgrade my two endian boxes naither via efw-upgrade nor via backup/restore, I deceided to install from scratch.

I'm running both boxes on ESXi and discovered two starnge issues:

A) efw is rebooting if I'm doing configuration work via web interface.

B) I can setup IPsec tunnels without any problem, I setup an any to any firewall rule under VPN traffic tab and I can ping every host in every direction.
But I cannot use any other protocols beside icmp and telnet; thats very strange!
If I do "telnet boxname 22" I get an reply from the ssh daemon, if I do "ssh boxname" I get nothing?!?
Same with smtp, imap and others.

Has anybody the similar problems?