Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 305

A network administrator is troubleshooting an issue with Phase 2 of an IPSec VPN tunnel. The administrator determines that the lifetime needs to be changed to match the peer.

Where should this change be made?

Answer options

Correct answer: B

Explanation

The correct answer is B, as the IPSec Crypto profile is responsible for defining the parameters of the IPSec tunnel, including the lifetime settings. The other options, such as IKE Gateway profile and IKE Crypto profile, pertain to Phase 1 configurations and do not directly influence Phase 2 IPSec settings.