Just looking for some real-world background information on these very generic questions.
If you employ AES-256, why do you choose it over 3DES (or any other method for that matter) for IKE Policy encryption?
If you employ Perfect Forwarding Secrecy, why do you choose to enable it?