We had a simular situation and the vendor made the following change … here is our senerio …
When the line dropped another connection was established …… the message went across “line a” and the ack came back on “line b” ….. the vendors response was …. We disabled the keepalives in the IPSEC configuration on our side to resolve