ASA55xx IPSec

[hsasaki_cert]

First, I'm not Bilingual so excuse my English.

Dear Sirs,

Please teach IKE SA and IPSec SA of IPSec.

When IPSec SA was connected with IKE SA, the setting concerning IPSec SA was changed.

Then, it was able to be understood that the connection of IPSec SA cut,

and the connection of IKE SA cut at the same time.

Is it normal operation?

Best regards,

[gmarogi]

When there is traffic and there is no IPSEC SA, the SA will be renegotiated using the existing IKE SA. When the IKE SA is not there, this one will be created first and then the IPSEC SA will be created. But if there is no traffic, the SA's should not be re-established.