Soft and hard lifetime in IPSec

[AY_FASAR]

Hi,

I think I understand what is soft lifetime, but I can't see anywhere in Ipsec config to set it, is it something that palo alto set by default based on the hard lifetime.

Also having some issues with my tunnel and when set the debug the soft lifetime between palo alto and other end (different vendor)  doesn't match, can this cause the issue?

Thanks