Peer-side IPsec configuration options

The appliance does not provide a configuration interface for the peer side of a tunnel, so the peer site's administrator must configure settings such as rekey (SA lifetime) on their own endpoint. Flex Appliance does not recommend an aggressive rekey policy for a Child SA - especially one based on a data-volume threshold.

For example, an aggressive rekey setting can result in NetBackup job failures. If job failures are observed while the appliance reports the tunnel status as Connected, review any custom settings on the peer.