Have you checked if the necessary ports for TFTP are allowed through the
IPSec tunnel and firewalls? It's worth verifying the firewall rules and
ensuring that TFTP traffic is permitted between the remote users and the
PBX. Also, double-check the PBX'...