(gwlb.inc) ok, this looks odd, I can't find a valid use of "ipprotocol" in the gatewaygroups. (other then the one filter.inc)