High-end SRX series devices have a chassis cluster control port that is used to connect two SRX Series devices to form a chassis cluster. To refrain attackers from gaining privileged access through this control port, an internal IPsec SA is installed using the request security internal-security-association refresh command.
