diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 49a23245e5..c7547366b6 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -474,14 +474,14 @@ function vpn_ipsec_configure($ipchg = false)
 
 					$init = "on";
 					$genp = "off";
-					$pcheck = empty($ph1ent['proposal_check']) ? $ph1ent['proposal_check'] : $pcheck = "claim";
+					$pcheck = !empty($ph1ent['proposal_check']) ? $ph1ent['proposal_check'] : $pcheck = "claim";
 					$passive = "";
 					if (isset($ph1ent['mobile'])) {
 						$rgip = "anonymous";
 						/* Mimic 1.2.3's behavior for pure-psk mobile tunnels */
 						if ($ph1ent['authentication_method'] == "pre_shared_key") {
 							$passive = "passive on;";
-							$pcheck = empty($ph1ent['proposal_check']) ? $ph1ent['proposal_check'] : $pcheck = "obey";
+							$pcheck = !empty($ph1ent['proposal_check']) ? $ph1ent['proposal_check'] : $pcheck = "obey";
 							$genp = "on";
 						} else {
 							$init = "off";