IPSec tunnels in Site-to-Site VPN can now be customized in the following ways:

• Custom phase 1 and phase 2 IKE proposals
• Configurable Security association lifetimes
• Configurable Dead Peer Detection, IKE Initiation, and NAT Translation

Additionally, you can now view the security associations for a tunnel. Tunnels that use BGP routing will now show the routes received and sent to the Customer-Premises Equipment (CPE).

When Oracle detects an issue that prevents the establishment of an IPSec tunnel, the console will show troubleshooting information to assist with tunnel set up.