The IPsec VPN on your SRX Series device establishes both the Phase 1 and Phase 2
security associations. Users are able to pass traffic through the VPN. During peak VPN
usage times, users complain about decreased performance. Network connections outside of
the VPN are not seriously impacted. Which two actions will resolve the problem? (Choose
two.)

A.
Lower the MTU size on the interface to reduce the likelihood of packet fragmentation.

B.
Verify that NAT-T is not disabled in the properties of the phase 1 gateway.

C.
Lower the MSS setting in the security flow stanza for IPsec VPNs.

D.
Verify that the PKI certificate used to establish the VPN is being properly verified using
either the CPL or OCSP.