I'm testing out a Cisco SA520W for some remote retail locations we manage.
The one thing that is currently holding me back on it is I haven't found a way to set the VPN connection to connect when the device comes on, or better yet to "always have it up" to where if it loses the connection it tries to re-open it.
I can live with it just coming up on boot as the users on site are typically familiar with power cycling the firewall before calling in with issues.
The IPSec VPN comes up and functions fine, but has to be done so manually.
From my experience, Cisco devices won't preemptively initiate IPsec connections until it sees some traffic destined for the remote subnet on the other end of the VPN.
Have you tried just pinging across the VPN tunnel? That should force it to start up.