VPN Connection from Firepower to Azure

[jdenne]

I've been trying to establish a VPN connection from an FPR appliance to Azure without any luck.  Suggestions?

[balaji.bandi]

At this moment you have not provided enough information to suggest what is wrong, until we know what is the problem and error logs.

suggest to look below document for reference :

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/azure/ftdv-azure-qsg.html

[Mohammed al Baqari]

>From Azure, you can generate config file for ASA. Get it and login to your
FTD to compare the generated cli with your ftd cli. This can help.

Other than that you need to describe your problem properly if you are an IT
resource and not end user

[jdenne]

The problem is a policy mismatch error.  Been over it a few times with Azure tech support.  There might be some extra things that need to be configured on the Cisco end that the main FTD GUI does not provide.  It looks like it is not even getting thru IKEv2 agreement from the Azure end of the troubleshooting.

[balaji.bandi]

In that case you need to provide both the side configuration and logs to asists better.

at the stage we do not know what is configured.

[jdenne]

It is *not* ASA.  I think this is half the problem.  It is a FPR-2100 configured with the 6.3 software load.  I have yet to find a combination of protocols that works.  If someone has a "recipe" to try, I am more than willing to give it a shot.  I have 4 other VPN tunnels set up on this thing that work fine.  If somebody wants to give me step-by-step instructions on what to try next.  Plus, if somebody does know, it would help anybody else who is experiencing this problem. 

[Sheraz.Salim]

might this may help you 

https://networkdirection.net/articles/asa/firepowermanagementcentre/fmcsitetositevpns/

[balaji.bandi]

How are you managing this FTD ? using FMC  ?