I've just setup IPsec on my router (pfSense) and my IPsec clients have a different subnet (192.168.10.0/24) than my LAN subnet (192.168.0.0/24). By default, the Windows Firewall (in Windows 7 at least ...