CONTAP-365807: IPsec Traffic Interruption When Modifying a Policy
Issue
When an IPsec policy is modified, the associated IPsec security associations (SAs) are normally removed and must be established again. During this renegotiation, traffic protected by the policy can be interrupted. This can occur, for example, when replacing an expiring certificate.
