diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc
index 6c34c6c00f..f3b831785b 100644
--- a/etc/inc/filter.inc
+++ b/etc/inc/filter.inc
@@ -2507,7 +2507,8 @@ EOD;
                  */
                 $prot_used_esp = false;
                 $prot_used_ah  = false;
-
+		
+		if (is_array($config['ipsec']['phase2']))
                 foreach ($config['ipsec']['phase2'] as $ph2ent) {
 
                 	/* only evaluate ph2's bound to our ph1 */