VPN Keep-alives

If you are running a pre-5.4.1 Prisma SD-WAN ION device version, the aggressive and non-aggressive mode settings configured on the circuit will take affect. If VPN keep-alive timers were changed using the advanced UI, they will continue to take affect until the device is upgraded to release 5.4.1 or later.
Pre-5.4.1 circuits with non-aggressive mode settings are automatically translated to non-aggressive mode keep-alive settings with Keep-Alive Interval - 30,000 ms and Keep-Alive Failure Count - 3, when controller upgrades to Release 5.4.1.
Pre-5.4.1 circuits with aggressive mode settings, which are the default settings, inherit settings from the Circuit Category level, when controller upgrades to Release 5.4.1. The Circuit Category level, by default, has the aggressive mode keep-alive settings (Keep-Alive Interval - 1000 ms and Keep-Alive Failure Count - 3).