Config on Device but not on NSM:
  set ike ikev2 initiator-send-dummy-ipsec 
  set ike ikev2 ike-sa-soft-lifetime Please_made_changes_here
  set ike ikev2 stateless-cookie-threshold 100

Config on NSM but not on Device:
  set ike ikev2 initiator-send-dummy-ipsec 
  set ike ikev2 ike-sa-soft-lifetime 60
  set ike ikev2 stateless-cookie-threshold 100

Config on both Device and NSM but reordered:
  

Config to be sent to Device on next Update Device:
  set ike ikev2 initiator-send-dummy-ipsec 
  set ike ikev2 ike-sa-soft-lifetime 60
  set ike ikev2 stateless-cookie-threshold 100

CA Certificate to be removed from Device:
  

CRL to be removed from Device: