Dynamic IP Tunnels

In order to establish a site-to-site tunnel (IPSec or WireGuard) between your SASE gateway and a firewall or router with a dynamic public IP address, you need to apply some modifications to the tunnel creation process. Follow the instructions in:

• IPsec Site-to-Site VPN Tunnel

• WireGuard Connector Tunnel

Notes: This option is not supported by cloud IaaS providers (AWS, GCP, or Azure). Only a single dynamic IP IPSec tunnel is supported per each Cloud Gateway.