it is documented and verified by TAC that a VPN tunnel that is IPv6 on the outside and IPv4 on the inside will always use SSL instead of ESP.
Is that something which could be changed?
Do things like Enhancements Requests to development exist?
We haven´t heard back from our SE unfortunately.
We would like to use ESP to prevent the TCP-in-TCP situation.