Which two statements are true about policy-based VPNs as compared to route-based IPsec VPNs when using ScreenOS devices?