I am a little confused - were are configured b/w polices applied? Most people agree that they MUST be applied to a group, and to a LAN-to-LAN tunnel.

But, a believe that applying to a group is optional - and it must be applied to an interface - normally the public interface.

Could you confirm the correct answer for us?

Additionally, could you inform me were is the best place for me/ us to get answers to CCSP related questions. Thank you in advance.