I think they (IPSEC SA) can be left in use until they expire. I don't see any security harm in doing so. Parag Salvi IBM AIX IPSecurity. antonio.barrera@nokia.com wrote: > Hi, > If IKE receives a Delete payload for an ISAKMP SA does it imply that > the IPSEC SA negotiated by this ISAKMP SA must be deleted as well, or they > can be left in use until they expire? > > Toni