When I use the 'Centralized Protection Policy' ina Cisco VPN concentrator and I push a policy to the client, does that policy stay in effect(like the always on option) , when the tunnel is disconnected, or is it (as I expect) that the policy is remov...