Prestige 652H/HW Series User's Guide
When there is outbound traffic but no inbound traffic, the SA times out
automatically after two minutes. A tunnel with no outbound or inbound traffic is
"idle" and does not timeout until the SA lifetime period expires. See section 16.6 on
keep alive to have the Prestige renegotiate an IPSec SA when the SA lifetime
expires, even if there is no traffic.
Figure 16-9 SA Monitor
VPN Screens
16-27