Specify an action to take if the tunnel
is not available. If the threshold number of heartbeats is lost,
the firewall takes the specified action. wait-recover—Wait
for the tunnel to recover; do not take additional action. Packets
will continue to be sent according to the PBF rule. fail-over—Traffic will fail over to
a backup path, if one is available. The firewall uses routing table lookup
to determine routing for the duration of this session.
In
both cases, the firewall tries to negotiate new IPSec keys to accelerate
the recovery. | 
