A VIA client tries to initially connect to corporate office controller through an intermediate firewall.

A VIA client tries to initially connect to corporate office controller through an intermediate firewall. However, the VPN connection fails. The administrator examines the firewall rules and determines that rules for UDP 4500 and UDP 500 are configured.

Which additional protocol must be allowed in the firewall rules to resolve this connection failure?