Deploy Two IPSec Site Tunnels

I need help building two separate site-to-site IPSec tunnels that link my on-premises Cisco ASA firewall with an Azure Virtual Network Gateway and QNAP NAS. Both tunnels will use pre-shared keys for authentication; if you normally default to AES that works for me, but I’m open to your recommendation as long as it meets Microsoft and Cisco best-practice guidelines.

The ASA is already in use, and the Azure side of the network is up with a basic VPN gateway deployed—no tunnels have been configured yet.

• Use ASDM for the ASA to configure Cisco device, matched to Azure’s required parameters.
• Verify the tunnels come up, pass traffic in both directions

Since all the devices are in use, I will use shared screen (AnyDesk) and log in for you to complete the work.