I've created a VPN successfully from a Cisco FMC managed FTD (v7.4.2.4) to a AWS VPN gateway, but am having issues as the IKEv2 phase 1 SA lifetime doesn't match.  The AWS side always uses 28800 and I've configured a policy on the FTD to use 28800 se...