IKEv2 Configuration

Describes how to configure IPsec tunnels on Cisco ASA/FTD using IKEv2.

Note: Forcepoint ONE SSE recommends using the latest firmware for your device.

You need to configure the primary tunnel and secondary tunnel on the Cisco ASA/FTD. However, only the primary tunnel will be routing the traffic unless the primary tunnel is down or broken. In such cases, secondary tunnel routes the traffic until the primary tunnel is up and working properly.