What are the security best practices for implementing an IPsec tunnel?

To deploy a VPN, we recommend that you closely follow the documentation: Tutorial: Setting up a VPN Connection.

During the configuration of the VPN tunnel, in particular, you need to correctly configure the values of dead peer detection (DPD). In some cases, a timeout is set due to low traffic on a VPN tunnel and the connection may be cut. We can recommend a lifetime of 86400 seconds for phase 1 and 3600 seconds for phase 2.