An organization's employee needs to connect to the office through a high-latency internet connection. Which SSL VPN setting should the administrator adjust to prevent the SSL VPN negotiation failure?

Session-ttl (Time-To-Live) defines the maximum lifespan of an established VPN session, not the duration allowed for the initial connection and login process.

The login timeout setting in SSL VPN configurations dictates the maximum time allowed for the client to complete the authentication and initial negotiation process after initiating a connection. In high-latency environments, this process can exceed the default timeout, causing negotiation failures; increasing this value allows sufficient time for successful establishment.

Idle-timeout specifies how long an established SSL VPN connection can remain inactive before being automatically disconnected, which is unrelated to the initial negotiation phase.

The UDP idle timer is relevant for established UDP-based VPN traffic and controls the timeout for inactive UDP sessions, not the initial SSL handshake or login process.