Setting up site to site VPN on an NGAF involves configurations on the firewall to establish secure connection between 2 or more sites. The steps may vary depending on the model and software versions but you may refer to the steps below:

1. you need to get the IP addresses of both sites. Public IP addresses (if applicable) and/or local network subnets for each site
2. access the NGAF's IP address thru web browser
3. locate the VPN configuration section. usually under a "VPN" or "network" section depending on the model and version.
4. Create a VPN tunnel
   - define which site will do the VPN connection initiation and specify the responder's IP address or hostname
   - choose the authentication method (PSK or certificates) and enter the PSK or configure the certificate settings
   - configure Phase and Phase 2 settings including the encryption, hash algorithms, and lifelines. It should be matched from both ends
   - specify the involved local and remote networks in the VPN
5. make sure that routing is properly configured to direct traffic thru VPN tunnel
6. create firewall rules to allow traffic between the local and remote networks thru VPN tunnel
7. testing and commissioning of the connectivity between local and remote devices

Setting up site to site VPN on an NGAF involves configurations on the firewall to establish secure connection between 2 or more sites. The steps may vary depending on the model and software versions but you may refer to the steps below:

1. you need to get the IP addresses of both sites. Public IP addresses (if applicable) and/or local network subnets for each site
2. access the NGAF's IP address thru web browser
3. locate the VPN configuration section. usually under a "VPN" or "network" section depending on the model and version.
4. Create a VPN tunnel
   - define which site will do the VPN connection initiation and specify the responder's IP address or hostname
   - choose the authentication method (PSK or certificates) and enter the PSK or configure the certificate settings
   - configure Phase and Phase 2 settings including the encryption, hash algorithms, and lifelines. It should be matched from both ends
   - specify the involved local and remote networks in the VPN
5. make sure that routing is properly configured to direct traffic thru VPN tunnel
6. create firewall rules to allow traffic between the local and remote networks thru VPN tunnel
7. testing and commissioning of the connectivity between local and remote devices