Which two statements are correct about processing traffic entering an IPSec tunnel on an SRX Series device?