Auto Kill VPN on failover

Pash

Hi Guys & Gals,

So I have track-ip setup to do VPN failover on a NS50 to an NS25 (this is my lab in the office, in production will be SSG140 to anything from NS5GT to SSG20). This works fine and the routes fail-over as do the VPN's to the backup.

One thing that is curious to me. When the failover switches back to the more attractive routes. What would be the best method to "kill" the backup VPN on the switchover?

Anyone ever thought about this or using it in production?

Cheers,

Pash