Configure Tunnels in Secure Access
Secure Firewall authenticates to the Secure Access IPsec headend by using a Pre-Shared Key (PSK) and IKEv2 IP identity.
Follow the steps in Add Network Tunnel Group to add an FTD device to Secure Access.
The new tunnel appears in Secure Access with a status of UnEstablished. The tunnel status is updated once the first IKEv2 INIT message containing the tunnel identity is received in one of the Secure Access data centers.
Note: Secure Access does not support dynamic IP addresses for ASA and Secure Firewall devices.