> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qawolf.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Site-to-Site IPSec Tunnel

> Set up an IPSec site-to-site VPN tunnel between your network and QA Wolf using pre-shared key authentication.

* Configure your VPN gateway to support:
  * **IPsec site-to-site tunnels**
  * **Pre-shared key (PSK) authentication**
  * **Static routing** (dynamic routing is not supported)
  * **IKEv1 or IKEv2**
* Configure your firewall and VPN gateway to allow IPsec traffic:
  * **Ports:** UDP 500 and UDP 4500
* Use the information provided by QA Wolf to complete your VPN configuration:
  * **QA Wolf VPN gateway public IP address(es):** Configure these as the remote IPsec peer
  * **Pre-shared key (PSK):** Set as the tunnel authentication secret
  * **Assigned subnet:** Add static routes to allow traffic to and from QA Wolf

## Compatibility

* **Fully supported:** AWS Site-to-Site VPN, Google Cloud VPN, Azure VPN Gateway
* **Supported with configuration:** Cisco ASA, Palo Alto, FortiGate
* **Not supported:** Dynamic-routing-only VPNs (for example, BGP-only)

<Danger>
  If your VPN solution is not listed as fully compatible, contact your QA Wolf engineering lead to confirm interoperability before setup.
</Danger>