How do I create a site-to-site IPsec tunnel between NG Firewall and another device?

IPsec on NG Firewall should work with any compatible endpoint, but unfortunately we don't have the resources to test against all known IPsec devices. We recommend documenting the Phase 1 & Phase 2 settings of the third-party IPsec device, then matching those settings on NG Firewall under the Manual Configuration option available in all tunnel configurations.