Cisco
Login
Search
Platform GCP
Activity Upgrade

Establish Secure Connections Virtual Private Network Management Configure Virtual Private Network Management Introduction to Site-to-Site Virtual Private Network Site-to-Site VPN Configuration for FDM-Managed Edit an Existing Security Cloud Control Site-To-Site VPN

Last updated: Jul 29, 2025

Edit an Existing Security Cloud Control Site-To-Site VPN

The advanced configuration wizard is used by default to modify an existing site-to-site VPN configuration.

Procedure

1

In the Security Cloud Control platform menu, choose Products > Firewall.
2

In the left pane, choose Manage > Secure Connections > Network Connections > Site to Site VPN.
3

Select the desired site-to-site VPN tunnel that you want to edit.
4

In the Actions pane, click Edit.


 

Alternatively, you can perform the following to edit the configuration:

  1. Open the VPN page and click Global View button in the filter panel (for more information, see Global View).

    The illustration of all site-to-site VPN tunnels available across all devices appears.

    To edit the configuration, one of the peers must be FDM-managed device.

  2. Select a device by clicking the box.

  3. Click View details to view its peers.

  4. Click the peer device to view the tunnel details.

    You can view the tunnel details, NAT information, and key exchange information pertaining to the device.

  5. Click Edit in Tunnel Details.
5

In the Peer Devices section, you can modify the following device configurations: Configuration Name, VPN Access Interface, and Protected Networks.


 

You cannot change the participating devices.
6

In the IKE Settings section, you can modify the following IKEv2 policies configurations:

  1. Click the blue plus button for the respective device and select new IKEv2 policies. To delete an existing IKEv2 Policy, hover-over the selected policy and click the x icon.

  2. Modify the Pre-Shared Key for the participating devices. If the pre-shared keys are different for endpoint devices, click the blue settings button and enter the appropriate pre-shared keys for the devices.

  3. Click Next.
7

In the IPSec Settings section, you can modify the following IPSec configurations:

  1. Click the blue plus button to select new IKEv2 proposals. To delete an existing IKEv2 Proposal, hover-over the selected proposal and click the x icon.

  2. Choose the Diffie-Hellman Group for Perfect Forward Secrecy.

  3. Click Edit VPN, and then Finish.

The Point to point VPN is modified and updated with all the changes you have made.

Previous topic Configure Networking for Protected Traffic Between the Site-To-Site Peers Next topic Delete a Security Cloud Control Site-To-Site VPN Tunnel