You can use secure renegotiation for HFA devices (not OptiPoint).
Possible values are from 0 to 167 hours, 0 disables renegotiation.
- Activation/Deactivation on CGW:
STMI WBM > Configuration > Security > Signaling & Payload
encryption (SPE) > click on SPE Security Setup > Edit Security
Setup > Enforce Secure Renegotiation (RFC 5746)
- Re-keying interval on CGW:
STMI WBM > Configuration > Security > Signaling & Payload
encryption (SPE) > click on SPE Security Setup > Edit Security
Setup > Maximum Re-Keying interval
- Activation/Deactivation on SG:
NCUI WBM > Configuration > Security > Security Options >
Enforce Secure TLS Renegotiation (RFC 5746)
- Re-keying interval on SG:
STMI WBM > Configuration > SPE > SPE Security Setup > Maximum
Re-Keying interval