API TCP RST

Hi

I’m using the following setup:

Monitoring VM (IP .66) <-> CCR1009 A <- IPSEC over Internet -> CCR1009 B (IP .254)

The monitoring VM is checking BGP peer’s status on CCR B using the API. Currently I have a strange behavior (I think it depends to IPsec): CCR B some time sends TCP RST packets. Therefore the monitoring fails.
Selection_157.png
Any Ideas what I could do?

Regards
Patrick