This counts Phase-2 exchanges this device sent that were rejected by the receiving peer based on their policy, out of the total in cifIkeGlobalOutP2Exchgs, essentially the outbound mirror of cifIkeGlobalInP2ExchgRejects. A climbing count here means remote peers are turning down this device's own negotiation proposals, which points an engineer toward reviewing this device's own configured transform sets and proxy IDs against what specific peers expect, rather than assuming the problem is entirely on the remote end. This is a particularly useful counter on a hub device serving many spoke sites, since it can reveal that this device's own default IPsec policy doesn't match what one or more particular spokes were configured to expect.