https://live.paloaltonetworks.com/t5/general-topics/tunnel-to-azure-and-phase-1-and-2-lifetime/m-p/254560#M72247 <P>Hello,</P><P>These timers are only for the rekeying of the tunnel. If the rekey fails, the tunnel will drop and then data will be dropped. Otherwise the devices just renegotiate that they have matching info.</P><P>&nbsp;</P><P>Hope that helps.</P> Thu, 21 Mar 2019 20:54:05 GMT OtakarKlier 2019-03-21T20:54:05Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-to-azure-and-phase-1-and-2-lifetime/m-p/254502#M72234 <P><SPAN>when renegotiate happens</SPAN><BR /><BR /><SPAN>or</SPAN><BR /><BR /><SPAN>when lifetime expires will that cause traffic going via tunnel to be dropped?</SPAN></P><P>&nbsp;</P><P><SPAN>We have phase 1 and 2 lifetime set to 24 hours.</SPAN></P> Thu, 21 Mar 2019 14:17:56 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-to-azure-and-phase-1-and-2-lifetime/m-p/254502#M72234 MP18 2019-03-21T14:17:56Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-to-azure-and-phase-1-and-2-lifetime/m-p/254560#M72247 <P>Hello,</P><P>These timers are only for the rekeying of the tunnel. If the rekey fails, the tunnel will drop and then data will be dropped. Otherwise the devices just renegotiate that they have matching info.</P><P>&nbsp;</P><P>Hope that helps.</P> Thu, 21 Mar 2019 20:54:05 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-to-azure-and-phase-1-and-2-lifetime/m-p/254560#M72247 OtakarKlier 2019-03-21T20:54:05Z