What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?
A . FortiGate automatically negotiates different local and remote addresses with the remote peer.
B. FortiGate automatically negotiates a new security association after the existing security association expires.
C. FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.
D. FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

View Answer

Answer: B

Explanation:

The auto-negotiate feature in phase 2 configuration of an IPsec tunnel allows the FortiGate to negotiate a new security association when the existing one expires. This feature ensures that the tunnel stays up without any interruption in the secure connection between the peers.