The CMA _____________ objects must be imported into the Global Security Policy when configuring cross-Customer VPNs