The problem with both WinBox and WebFig misreporting the IPsec SA expiration time is not fixed yet in 6.3. The reported value is a) incorrect and b) counts up (but should count down). Everything is fine on console, the “/ip ipsec installed-sa print” command reports correct value.
Original report is here: http://forum.mikrotik.com/t/radius-server-not-working-in-2-8-11/127/1