 Re: fwm sic_reset impact ?
You should only do the fwm sic_reset command if no other choice. It really is a pain having to remove all of the VPN config from the policy, turn off the VPN on the gateways etc.
You then have to reenter all of the VPN config leading potentially to mistakes in incorrectly configuring the VPN again, and then having to push the policy, I also personally do a vpn tu and reset the tunnels once the policy push has been done to force the negotiation again.
It shouldn't affect existing connections, but you won't get new connections if memory serves me correctly. |